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AO  106  (Rev.  06/09)  Application  for  a  Search  Warrant  

United  States  District  Court 

for  the 

Southern  District  of  New  Y ork 

In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Four  Premises  and  Two  Electronic  Devices,  See 
Attached  Affidavit  and  Riders 

APPLICATION  FOR  A  SEARCH  WARRANT 

I  a  federal  law  enforcement  officer  or  an  attorney  for  the  government,  request  a  search  warrant  and  state  under 
penalty  of  peijury  that  I  have  reason  to  believe  that  on  the  following  person  or  property  (identify  Hk person  or  describe  the 

Attached^ 

located  in  the  ■  Southern  District  of _ New  York _ ,  there  is  now  concealed  (identify  the 

person  or  describe  the  property  to  be  seized): 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDERS. 

The  basis  for  the  search  under  Fed.  R.  Crim.  P.  41(c)  is  (check  one  or  more): 
sT  evidence  of  a  crime; 

sT  contraband,  fruits  of  crime,  or  other  items  illegally  possessed; 
sT property  designed  for  use,  intended  for  use,  or  used  in  committing  a  dime, 

O  a  person  to  be  arrested  or  a  person  who  is  unlawfully  resfrained. 

The  search  is  related  to  a  violation  of: 

Code  Section  Offense  Description 

18  U.S.C.  s  371, 1005, 1014,  Conspiracy,  false  bank  entries,  false  statements  to  a  financial  institution, 

1343  and  1344,  and  wire  fraud,  bank  fraud,  and 

52  DSC  301 1 6  and  301 09  illegal  campaign  contributions 

The  application  is  based  on  these  facts: 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 

fif  Continued  on  the  attached  sheet. 

□  Delayed  notice  of _ days  (give  exact  ending  date  if  more  than  30  days: - )  is  requested 

under  18  U.S.C.  §  3103a,  the  basis  of  which  is  set  forth  on  the  attached  sheet. 


Sworn  to  before  me  and  signed  in  my  presence. 

Date:  04/08/2018 

City  and  state:  A/  Y ^  P- .  /U  fC  vo  n  f 


Printed  haMearjatme 


*s  signciture 


Hon.  Hanry  3)  Pitmein,  U.S.  Magistrate  Judge 

PrihtpA  nmnp.  arid  title 


j  4-8 MAG  2969 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United  ; 
States  of  America  for  a  Search  and  Seizure  : 
Wan-ant  for  the  Premises  Known  and  Described  : 
as  (1)  502  Park  Avenue,  : 

York,  New  York  10022,  (2)  Michael  Cohen’s  i 
Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New  ; 
York,  New  York  10112,  (3)  Safe  Deposit  Box  #  - 
^Bkocated  at  the  TD  Bank  Branch  at  500  Park  ; 
zwenue.  New  Yorlc,  New  York  10019,  and  (4)  ; 

■Eoews'Regency  Hotel7540-Park  AvenuerRoom  r 

1728,  New  York,  New  York  10065,  and  Any  i 
Closed  Containers/Items  Contained  Therein,  and  : 
the  Electronic  Devices  Known  and  Described  as  : 
(1)  an  Apple  iPhone  with  Phone  Number 
^^^^■and  (2)  an  Apple  iPhone  with  Phone  : 


Number 

Reference  No.  20 1 8R00 1 27 


TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 

ipecial  Agent,  Federal  Bureau  of  Investigation,  being  duly  sworn, 

deposes  and  says: 

1.  Introduction 
A.  Affiant 

1,  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  paiticipated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 
involving  electronic  evidence. 

2.  I  malce  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 
Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  premises  specified  below  (the  “Subject 
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Premises”)  and  the  electronic  devices  specified  below  (the  “Subject  Devices”)  for,  and  to  seize, 
the  items  and  information  described  in  Attachments  A,  B,  C,  D,  E  and  F .  This  affidavit  is  based 
upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enforcement  personnel;  and  my  tiaining,  experience  and  advice  received  concerning  the 
use  of  electronic  devices  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored 
infoi-mation  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of 


establishing  probable  cause,  it  doesmotinclude  all  the  facts  that  I  have  learned  during  the  course 


of  my  investigation.  Where  the  contents  of  documents  and  the  actions,  statements,  and 


conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in  part,  except  where 
otherwise  indicated. 

B.  The  Subject  Premises  and  Subject  Devices 

3.  Subject  Premises-1,  Subject  Premises-2,  Subject  Premises-3  and  Subject  Premises- 

4  (collectively,  the  “Subject  Premises”)  are  particularly  described  as: 

a.  Subject  Premises-1  is  Apartment ^Jlocated  inside  the  building  at  502 
Park  Avenue,  New  York,  New  York  10022.  The  building  located  at  502  Park  Avenue  is  a  32- 
floor  brick  residential  building.  Subject  Premises-1  is  located  on  the^^^|floor  of  the  building. 


Based  on  my  review  of  New  York  City  property  records,  I  have  learned  that  Michael  Cohen  and 


Laura  Cohen  own  Subject  Premises-1.^  Additionally,  as  described  below.  Subject  Premises-1  is 
Cohen’s  full-time  residence. 

b.  Subject  Premises-2  is  an  office  located  on  the  23rd  floor  of  the  building  at 
30  Rockefeller  Plaza,  New  York,  New  York  10112.  The  building  located  at  30  Rockefeller  Plaza 


1  As  noted  infra,  I  have  learned  that  on  or  about  October  28,  2015,  Cohen  transferred  Subject 
Premises-1  into  a  trust. 


2017.08.02 


3 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  4  of  269 


is  a  66-floor  office  building  that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller 
Plaza.  Subject  Premises-2  is  located  on  the  23rd  floor  of  the  building  inside  of  the  offices  of  the 
law  firm  Scjuhe  Patton  Boggs.  The  office  is  assigned  to  Michael  Cohen.  As  described  below, 
Michael  Cohen  works  and  conducts  meetings  at  Subject  Premises-2. 

c.  Subject  Premises-3  is  a  safety  deposit  box  located  inside  the  TD  Banlc 
branch  location  at  500  Park  Avenue,  New  York,  New  York  10019.  Based  on  my  review  of  records 

"maintained  by  TD  Bank,“Thave  learned  that  th^safety-deposit  box  is  approximately  five  inches^by- 

ten  inches  in  size,  and  is  marked  as  box  The  safety  deposit  box  is  in  the  name  of  Michael 
Cohen  and  Laura  Cohen. 

d.  Subject  Premises-4  is  Room  1728  located  inside  the  Loews  Regency  Hotel 
at  540  Park  Avenue,  New  York,  New  York  10065.  The  building  is  a  luxury  hotel  located  on  Park 
Avenue  and  61st  Street.  Subject  Premises-4  is  located  on  the  17th  floor  of  the  hotel.  Based  on  my 
review  of  emails  obtained  pursuant  to  search  warrants  described  below,  I  have  learned  that  on  or 
about  January  5,  2018,  Cohen  received  an  email  from  an  employee  of  Loews  Regency,  which 
included  a  price  quote  for  a  long-term  stay  suite  based  on  a  three-month  stay  fiom  January  8  to 
April  8, 2018.^  On  or  about  January  29, 2018,  Cohen  sent  an  email  to  aLoews  Regency  employee, 
stating,  in  pertinent  part:  “I  just  spoke  to  my  wife  and  she  has  scheduled  the  move  for  Thui'sday. 
Please  mark  down  that  we  will  be  talcing  possession  on  Thursday,  February  1st.”  Based  on  my 
review  of  cell  phone  location  data,  I  have  learned  that,  over  the  past  24  hours,  two  cellular  phones 
used  by  Cohen  have  been  located  in  the  vicinity  of  Subject  Premises-4.  In  particular,  on  or  about 


^  Although  the  quoted  price  contemplated  a  three-month  stay  from  January  8  to  April  8,  it  appears 
that  Cohen  did  not  move  in  until  February  1,  and  as  of  today,  April  8,  cellphone  location 
infonnation  demonstrates  that  Cohen’s  cellular  phones  are  in  still  in  the  vicinity  of  Subject 
Premises-4. 
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April  8,  2018,  law  enforcement  agents  using  a  “triggerfish”  device  identified  Room  1728  as  the 
room  within  the  hotel  in  which  the  Subject  Devices  are  most  likely  present. 

e.  Therefore,  I  believe  that  Cohen  is  temporarily  residing  in  Subject 


Premises~4. 

4.  Subject  Device-1  and  Subject  Device-2  (collectively,  the  Subject  Devices  )  aie 


particularly  described  as; 

— - — Sul^ject  Device-Tis  an^pple  iPhone  serviced  by  AT&T  with  thefelephone  number 

Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 
Device-1  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-1  is  presently  located  in  the  Southern 
District  of  New  York. 

b.  Subject  Device-2  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 


ased  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 


Device-2  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-2  is  presently  located  in  the  Southern 


District  of  New  York. 

c.  Based  on  my  tiaining,  experience,  and  research,  and  from  consulting  the 
manufacturer’s  and  service  providers’  advertisements  and  product  technical  specifications 
available  online,  I  know  that  the  Subject  Devices  have  capabilities  that  allow  them  to,  among  other 
things:  malce  and  receive  telephone  calls;  save  and  store  contact  information;  send  and  receive 


^  Based  on  my  convei'sations  with  these  agents,  I  understand  that  it  is  also  possible  that  the  Subject 
Devices  are  one  floor  below,  in  Room  1628.  However,  as  noted,  I  understand  that  Cohen  received 
a  price  quote  for  a  long-term  stay  suite  and  is  residing  there  with  his  family.  Based  on  my 
conversations  with  FBI  agents  conducting  sm-veillance,  I  understand  that  Room  1728  appears  to 
be  a  suite,  whereas  Room  1628  appears  to  be  a  standard  room. 
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emails  and  text  messages;  download  and  run  mobile  telephone  applications,  including  encrypted 
call  and  messaging  application  such  as  WhatsApp,  Signal,  and  Dust;  take,  send,  and  receive 
pictures  and  videos;  save  and  store  notes  and  passwords;  and  store  documents. 

C.  The  Subject  Offenses 

5 .  For  the  reasons  detailed  below,  I  believe  that  there  is  probable  cause  to  believe  that 
the  Subject  Premises  and  Subject  Devices  contain  evidence,  fruits,  and  instrumentalities  of 
violations  of  t8--UTS^€^§§  1005  (false-banle  entries),  1014  (false-statements  to- a  financial- 
institution),  1343  (wire  fraud),  and  1344  (bank  fi-aud)  (collectively,  the  “Banlc  Fraud  Offenses”), 
52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the 
“Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other 
Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

D.  Prior  Applications 

6.  The  FBI  and  the  United  States  Attorney’s  Office  for  the  Southern  District  of  New 
York  (“USAO”)  have  been  investigating  several  courses  of  criminal  conduct  by  Michael  Cohen. 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  seiwed  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

7.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  fi'om  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails  and 
other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 
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a. 


On  or  about  July  1 8, 20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for 


emails  in  the  account  ^^^^J@gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received 
between  January  1, 2016  and  July  18,  2017  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant 

l^gmail.com  (the 


for  content  stored  in  the  iCloud  account  associated  with  Apple  ID  | 

“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

— — - cr - On-or-abouGNovember-13,-20177  th^FBI  sought  and'Obtained-a-seareh- 


warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 
November  13, 2017  (the  “Second  Cohen  Gmail  Warrant”). 

d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 


warrant  for  emails  in  the  account 


I  (the  “Cohen  MDCPC  Account”)  sent  or 


received  between  the  opening  of  the  Cohen  MDCPC  Account^  and  November  13, 2017  (the  First 


Cohen  MDCPC  Warrant”). 

8.  The  SCO  has  since  referred  ceifain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBI’s  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other- 
content  information  obtained  pursuant  to  the  First  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  Wan-ant.  On  or  about  March  7,  2018,  the  SCO  provided  the  USAO 


Based  on  my  review  of  this  war-rant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  fi  om  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 
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with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  Warrant.^  A  filter  team 
working  with  the  SCO  had  previously  reviewed  the  content  produced  pursuant  to  these  warrants 
for  privilege. 

9.  On  or  about  Febmary  28, 20 1 8,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  the  Cohen  Gmail  Account  and  the  Cohen  MDCPC  Account,  among  other  accounts,  sent 
or  received  between  November  14, 2017  and  February  28, 2018  (the  “Thhd  Cohen  Gmail  Warrant 

'WdW“SecdimXohen^]VroCPC  WaiTanf’)— The  content  produced'pursuant  to  diese  warrants-is- 

subject  to  an  ongoing  review  for  privilege  by  an  SONY  filter  team.® 

10.  The  emails  search  wan'ants  described  above  ai'e  refen-ed  to  collectively  as  the 

“Cohen  Email  Warrants.” 

11.  On  or  about  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  a  warrant  for 
prospective  and  historical  cellphone  location  information  for  Subject  Device-1  and  Subject 
Device-2.  On  or  about  April  8, 2018,  the  USAO  and  FBI  sought  and  obtained  authority  to  employ 
an  electronic  technique,  commonly  knoAvn  as  a  “triggerfish,”  to  determine  the  location  of  Subject 
Device-1  and  Subject  Device-2. 

n.  Probable  Cause 
A.  Overview 

12.  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  FBI 
are  investigating,  among  other  things,  schemes  by  Target  Subject  Michael  Cohen  (a)  to  defraud 
multiple  banks  from  in  or  about  2016  up  to  and  including  the  present,  and  (b)  to  make  an  illegal 

^  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  Februaty 
2,  2018. 

®  On  or  about  February  28,  2018  and  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  search  waiTants  authorizing  the  search  of  emails  and  content  obtained  pm'suant  to  previously 
issued  warrants  for  additional  subj  ect  offenses . 

8 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  9  of  269 


campaign  contribution  in  October  2016  to  then-presidential  candidate  Donald  Trump.  As  noted, 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

1 3 .  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations 
in  and  omitted  material  infoimation  from  financial  statements  and  other  disclosures  that  Cohen 

provided  to-multiple  banics-in  connection  with  a-transaetion  intended  to-relieve-Gohen  of- 

approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  misrepresented  his  ability  to  pay  cash  by  failing  to 
disclose  cash  he  began  receiving  in  2017  from  new  consulting  work;  (ii)  significantly  understated 
his  total  holdings  of  cash  and  cash  equivalents;  (iii)  failed  to  disclose  tens  of  thousands  of  dollai's 
he  received  in  monthly  interest  income,  and  (iv)  failed  to  inform  the  banks  fiom  which  he  was 
seeldng  debt  relief  that  he  had  agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party,^H 
^^^^^^in  connection  with  ^^^^^^icquisition  of  the  taxi  medallions  securing  Cohen’s 
debt.  By  making  these  misrepresentations  and  material  omissions,  Cohen  avoided  making 
monthly  payments  on  his  loans,  and  attempted  to  fraudulently  induce  the  banks  to  relieve  him  of 
certain  repayment  obligations  and  personal  guarantees  that  Cohen  and  his  wife  had  signed. 

14.  Additionally,  the  investigation  has  revealed  that  shortly  before  the  2016 
presidential  election,  Cohen  made  a  payment  of  $130,000  fiom  a  limited  liability  corporation 
(“LLC”)  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an  extramarital  affair  with 
then-candidate  Trump.  This  payment  was  made  to  Clifford  in  exchange  for  an  agreement  not  to 
make  any  public  disclosures  about  her  alleged  affair  with  Trump.  As  set  forth  below,  there  is 
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probable  cause  to  believe  that  Cohen  made  this  payment  to  Clifford  for  the  purpose  of  influencing 
the  presidential  election,  and  therefore  that  the  payment  was  an  excessive  in-kind  contribution  to 
the  Trump  campaign. 

15.  Based  on  my  review  of  emails  obtained  jfrom  the  Cohen  Email  Warrants, 
information  obtained  pursuant  to  the  iCloud  Warrant,  and  documents  produced  pursuant  to 
subpoenas,  as  well  as  my  review  of  public  som'ces,  I  have  learned  that  Cohen  has  used  tire  Subject 

Premises  to-(a)  receive  documents  related-to  the  transaction  intended  to  relieve  Cohen  oThis-taxi 

medallion  debt,  (b)  receive  documents  and/or  conduct  meetings  related  to  his  consulting  work,  (c) 
receive  documents  and/or  conduct  meetings  relating  to  his  finances  and  assets,  some  of  which,  as 
noted  above  and  as  detailed  ftirther  herein,  he  has  concealed  from  the  banks  in  connection  with  the 
refinancing  of  his  taxi  medallion  debt,  (d)  receive  and  send  documents  relating  to  his  payment  to 
Chfford,  and  (e)  house  and  operate  electronic  devices  that  were  utilized  in  connection  with,  among 
other  things,  the  taxi  medallion  fransaction,  Cohen’s  consulting  work,  and  his  payment  to  Clifford. 
Specifically,  as  described  below.  Subject  Premises-1  likely  contains  evidence  concerning  Cohen’s 
taxi  medallion  loans,  his  negotiations  with  banks,  his  personal  finances,  his  consulting  work,  his 
tax  returns,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence, 
all  of  which  constitute  or  contain  evidence  of  the  Subject  Offenses.  Additionally,  as  described 
below,  Subject  Premises-2  lilcely  contains  evidence  relating  to  Cohen’s  consulting  work,  his 
finances,  and  his  payment  to  Chfford,  as  well  as  electronic  devices  contauiing  such  evidence. 
Subject  Pi-emises-3,  as  described  below,  likely  contains  evidence  relating  to  Cohen’s  assets  and 
finances,  including  assets  that  may  not  have  been  disclosed  to  banks  in  coimection  with  the 
refinancing  of  Cohen’s  taxi  medallion  debt  or  documents  relating  to  such  assets,  and  documents 
or  evidence  related  to  Cohen’s  payment  to  Clifford.  Subject  Premises-4  lilcely  contains  electronic 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which  themselves  contain  evidence  of 
the  Subject  Offenses,  including  concerning  Cohen’s  taxi  medallion  loans,  his  negotiations  with 
banks,  his  personal  finances,  his  consulting  work,  his  tax  returns,  and  his  payment  to  Clifford. 
Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that  the 
Subject  Premises  and  Subject  Devices  will  include  evidence  of  the  Subject  Offenses. 

B.  Probable  Cause  Regarding  Subjects’  Commission  of  the  Subject  Offenses’ 

- ^ - ^ - ^ - The-Bank-Fraud-Scheme - - - ^ - 

(i)  Cohen ’s  Statements  to  Sterling  National  Bank 
1 6.  As  set  forth  in  detail  below,  in  20 14,  Cohen,  through  LLCs  controlled  by  him  and 
his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling  National  Bank  (“Sterling”)  and 
the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions,  for  approximately  $20  million. 
Though  entered  into  by  LLCs,  the  loans  were  also  secured  by  personal  guai'antees  in  the  names  of 
both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry  weakened  and  the  medallions  lost  value, 
Cohen  sought  to  renegotiate  the  terms  of  those  loans  and/or  relieve  himself  fi  om  their  obligations, 
including  the  personal  guarantees.  As  part  of  that  effort,  Cohen  made  a  series  of  representations 
to  Sterling  and  Mehose  about  his  net  worth,  assets,  available  cash  and  income,  among  other  things. 
Specifically,  based  on  my  review  of  records  mauitained  by  Sterling  and  Melrose,  and  public 
sources  concerning  the  taxi  indushy  and  the  value  of  taxi  medallions,  as  well  as  my  participation 
in  interviews  with  a  Sterling  executive  vice-president  (the  “Sterling  Employee- 1”)  and  two  other 


’  In  the  following  recitation  of  probable  cause,  I  ifequently  refer  to  phone  calls  or  text  messages 
involving  Cohen.  The  text  messages  described  herein  as  sent  or  received  by  Cohen  were  all  sent 
or  received  from  the  telephone  numbers  associated  with  Subject  Device-1  or  Subject  Device-2. 
The  vast  majority  of  the  phone  calls  described  herein  made  or  received  by  Cohen  were  made  or 
received  by  the  telephone  numbers  associated  with  Subject  Device- 1  or  Subject  Device-2,  although 
in  certain  limited  instances  Cohen  used  a  landline  or  other  phone. 
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Sterling  employees  (“Sterling  Employee-2”  and  “Sterling  Employee-3”),  I  have  learned,  among 
other  things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  EEC  owns  two 
medallions).*  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 

loans^ffom  Capital  One  banlc,  for  which  the  medallions  served  as  eollateraliT-Cohen  was  not-aYaxi- 

operator,  and  leased  his  medallions  to  a  third  party.  That  third  party  made  monthly  payments  to 
Cohen,  who  in  turn  used  some  of  those  proceeds  to  malce  his  monthly  loan  payments  to  Capital 
One. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 
the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One.  By  in  or  about 
September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would  allow 
Cohen  to  pay  off  his  loans  at  Capital  One  and  boiTow  more  money  from  the  then-increase  in  value 
of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval  in  the 
taxi  industry — as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber  taxi  medallion 
loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  market  value  of  taxi 
medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans  like  the  loans  held  by 
Cohen — were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee-1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 


*  One  of  these  companies.  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondia  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in  ► 

2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which 

according  to  letters  from  Capital  One  in  Sterling’s  files — ^was  greater  than  his  previous  debt  at  i; 

ll^ 

Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This  allowed  j 

Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or  ^ 

-aboufDecember872014,-each-ofeohen’s  sixteen  taxi  medallion-ELCs  entered  into  loan  agreements — - ; 

and  promissory  notes  with  Sterling  for  the  principal  sum  of  $1,375,000,  with  repayment  due  on 

I 

December  8, 2016.  Each  loan  was  signed  by  Michael  or  Laum  Cohen,  depending  on  who  was  the  ^ 

sole  shareholder  of  the  LLC.  The  address  listed  for  each  of  the  LLCs  was  the  address  for  Subject 

Premises-1 .  The  loans  were  also  each  secured  by  a  security  agreement,  dated  the  same  day,  making 

the  medallions  collateral  for  the  notes.  To  give  Sterling  additional  security,  Michael  and  Laura  ' 

Cohen  signed  personal  guarantees  and  confessions  of  judgment,  giving  Sterling  the  right  to  pursue 

collection  against  the  Cohens’  personal  assets  were  their  corporations  to  default  under  the  loan 

agreements.  The  personal  guaranty  agreements  stated  that  the  LLCs  had  offices  at  the  addiess  for 

Subject  Premises-1,  and  contained  a  notice  provision  that  stated  that  any  notices  required  by  the  [ 

agreements  should  be  mailed  to  Subject  Premises-1 .  In  total,  Sterling  agreed  to  lend  approximately  | 

$22  million  to  the  Cohens’  companies. 

d.  Pursuant  to  paificipation  agreements.  Sterling  transferred  45  percent  of  Cohen  s  ; 

taxi  medallion  debt  to  Melrose.^ 

|| 

I 

^  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in  | 

conservatorship  by  the  National  Credit  Union  Administration  (“NCUA  ). 
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e.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions,  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling  s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.^°  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  Itnow  that  Sterling  viewed  the 

"Fan^iohfai^bly  because,  accountiffg  for  laanpaym^e^^ 

projected  to  be  positive,  the  value  of  the  collateral  (as  estimated  by  Sterling)  exceeded  $42  mUlion, 
and  the  net  worth  of  Cohen— who  was  the  direct  obligor  under  the  guarantee  agreements— was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

f.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  bacldng  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies.  Additionally,  Cohen  began  falling  behind  on  loan  payments 
to  Sterling  and  Melrose.  I  laiow  from  records  maintained  by  Sterling  and  an  interview  with  Sterling 
Employee-2  that,  beginning  in  or  ai'ound  September  2015,  Cohen  told  Sterling,  in  sum  and 
substance,  that  the  individual  leasing  Cohen’s  medallions  had  fallen  behind  in  making  pa5mients  to 
Cohen,  and  that  as  a  result,  the  monthly  cash  flow  from  his  taxi  medallions  had  been  reduced, 
leaving  him  with  a  shortfall  of  approximately  $16,000  each  month.  For  instance,  I  have  reviewed 
an  email  from  Sterling  Employee-2,  dated  September  9,  2015,  summarizing  a  call  with  Cohen— 
which  according  to  the  email  and  toll  records  for  Cohen’s  cellphone  occurred  on  September  8, 

Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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2015— during  which  Cohen  told  Sterling  Employee-2,  in  sum  and  substance,  about  his  cash  flow 
problems  and  a  monthly  shortfall  of  approximately  $16,000.  In  that  same  email.  Sterling 
Employee-2  commented  that  despite  Cohen’s  statements,  his  personal  financial  information 
“indicate[d]  a  strong  ability  to  make  up  the  difference  in  payments.”  Cohen,  however,  according 
to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction  in  Cohen’s  monthly  payments. 

g.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 

Tirt^ie“^iWStMmg  Emp%ee=2rI  have  learned-that  Cohen  and  Sterling-Employee-2  spoke 

again  on  September  28, 2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
Icnow  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility— both  internally  and  with  Cohen— of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.^^  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my 
review  of  loan  documents  and  records  maintained  by  Sterling,  I  loiow  that  in  or  about  November 
2015,  as  a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his 
medallions  to  cover  monthly  interest  payments.  Sterling  and  Melrose  agreed  to  amend  their  loans 
with  Cohen  by,  among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extendmg 


the  loan  matoity  date  to  December  8, 2017. 

h.  I  know  from  intei-views  with  Sterling  Employee-1  and  Sterling  Employee-2,  as  well 

as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee-1  that 


Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  j 


[who  would  agree  to 


Based  on  my  review  of  property  records,  I  laiow  that  on  or  about  October  28,  2015,  ai  oun 
the  time  period  when  Sterling  raised  the  possibility  of  Cohen  posting  his  personal  residence— 
Subject  Premises- 1— as  collateral,  Cohen  fransferred  Subject  Premises-1  mto  a  trust. 
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assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee-1  and  Sterling  Employee-2  referenced 
above,  I  Icnow  that  by  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
corporate  toH[||||mim 

for  the  balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 


maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 

conditiomof  the^ansfer  of  the^medalliomloans — ^and  beeause-Sterling— wasmnfamiliar-with^^^^| 

Sterling  requested  that  Cohen  malce  a  substantial  principal  payment  on  the  loan,  of 
approxhnately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3 1, 2017,  Cohen  told  SterUng  Employee- 1,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with  Indeed,  in  an  email  sent  by  Cohen  to  Sterling  Employee-2  on  or 

about  February  22,  2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million  from  the  loan 
amount.” 

i.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 
was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medalhon  debt 
fi-om  Cohen  to  ^m|||||m  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 
Melrose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
Melrose  agree  to  the  terms.  On  or  about  May  2, 2017,  Sterling  Employee- 1  told 
that  Melrose  had  agreed  to  the  deal  in  principle,  and  that  Sterling  would  be  sending  the  parties  a 


term  sheet  shortly. 

j.  In  order  for  the  banlcs  to  conduct  diligence  and  evaluate  the  proposed  fransaction 
fully,  they  requested  financial  information  from  the  parties.  On  or  about  June  7,  2017,  Sterling 
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Employee-1  emailed  Cohen  to  request  an  “updated  personal  financial  statement,”  completed  | 

jointly  with  Cohen’s  wife,  and  Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June  i 

8, 20 1 7,  Cohen  emailed  Sterling  Employee-1  a  Sterling  personal  financial  statement  form  that  had 

I 

been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1,  2017  [ 

(the  “May  201 7  Financial  Statemenf ’)  that  was  also  attached.  The  May  20 1 7  Financial  Statement  | 

included  a  cover  letter  fi-om  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and  substance,  that 

theinformation  in  tire  statemenf  came  from  Cohen  and  that  Getzel  had  nofeonfirmed-its  accuracy—— -  | 

or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of  ^ 

$41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The  May  2017 
Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  ! 

$26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate  ^ 

holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence.^^  ; 

k.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 

Employee-1, 1  have  learned  that  Sterling  Employee-1  reviewed  the  May  2017  Financial  Statement  i 

with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee-1  asked  Cohen  about  i 

specific  line  items  on  the  financial  statement,  including  the  cash  amount,  value  of  medallions,  and  ■ 

total  habilities.  Cohen  stated  to  Sterling  Employee-1,  in  sum  and  substance,  that  the  May  2017  j 

Financial  Statement  was  accurate. 

l.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen  and 
attaching  a  non-binding  term  sheet  memorializing  the  potential  transaction  between 

■ -  ....  i 

Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  the  precipitous  decline  in  E 

assets  from  his  2014  financial  statement  to  his  2017  financial  statements  can  be  explained  | 

primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets  and  medallion  j 

investmeirts.  I 
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Sterling,  Melrose,  Cohen,  The  term  sheet  included  a  cover  letter  addressed 

to  Cohen  at  Subject  Premises- 1.  The  parties  negotiated  the  provisions  of  the  term  sheet  and,  on  oi 
about  September  5,  2017,  Sterling  Employee-1  sent  Cohen  a  copy  of  the 

executed  term  sheet.  According  to  the  term  sheet,|||||m|mwould  borrow  $20,000,000 
from  Sterling  and  Mehose,  to  be  secured  by  the  medallions  that  ^^^^^|vas  to  acquire  fiom 

Cohen. 

- g^lT^^^spafrdf the ^greeffl^Mraccordingio the teiinsheetrS  1x265^9 13  in prineipal(^^ 

is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banks,  widi  Cohen  paying  fifty  percent  and  the  banlcs  dividing  the 
remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789,  respectively,  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance— despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars— because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee- 1,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  pait  of  the  agreement.  Sterling 
and  Melrose  also  agi'eed  to  relieve  Cohen  and  his  wife  of  the  personal  guai'antees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  ’^^^Jtransaction,  Cohen  would  no  longer 

have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

n.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  ti'ansaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Melrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
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required  and  requested  additional  financial  statements  and  tax  returns  for  Cohen  and 
for  its  eredit  underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  September  25, 
2017,  Cohen  emailed  Sterling  Employee-2  a  copy  of  his  2016  tax  return.  The  tax  retmn  listed 
Cohen’s  mailing  address  as  Subject  Premises-1.  Additionally,  on  or  about  October  5, 2017,  Cohen 
i-e-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October 
6, 2017,  Cohen  emailed  Sterling  Employee-2  a  statement  of  financial  condition,  dated  September 


3072ai7  (the~“September“20T7"Fmancial  Statement”)- - - — - - 

o.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover  letter  fi-om  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.^^  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (including  the  taxi  medallion  entities  and  his  real  estate  holdings),^ 
$3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence  (which,  for  the  first 


Based  on  my  review  of  Cohen’s  financial  statements,  I  Icnow  that  this  further  decline  in 
assets  can  be  explained  primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets 
and  medallion  investments. 

I'l  Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thiity-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  whicl^a^onsiderably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-  ^^^^^|term  sheet. 
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time,  he  indicated  was  held  by  atrust).^^  The  September  2017  Financial  Statement  included  assets 
and  liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions 
and  some  of  his  real  estate  investment  entities. 

p.  From  iny  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  around  the  time  Cohen  provided  Sterling 
with  these  financial  statements— i.e.,  in  or  ai'ound  September  2017 — Cohen  stopped  paying 

montlily  loan  payments  on  his  taximedallion  loans  altogether— According  to  Sterling-Employee 

2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 
September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Cohen-’^^^^  transaction  was  favorable  for  the  bank 
-  that  is,  that^^^^^^vould  be  a  better  borrower  than  Cohen. 

q.  On  or  about  December  26,  2017,  Sterfing  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  The  demand  letter  was  addressed  to  Cohen  at 
Subject  Premises-1.  On  December  29,  2017,  Sterling  sent  Cohen  a  letter  stating  that  he  was  in 
default  under  the  loans  between  Sterling  and  Cohen’s  medallion  corporations.  The  notice  of 
default  was  addi'essed  to  Cohen  at  Subject  Premises-1 .  Cohen  did  not  make  an  iimnediate  payment 
on  the  loans,  but  instead  sent  an  e-mail  to  Sterling  Employee-1  on  or  about  January  24,  2018, 

Based  on  my  review  of  property  records  maintained  by  the  City  of  New  York,  and  my 
participation  in  an  interview  with  Getzel,  I  know  that  in  2015,  Cohen  transferred  his  residence  to 
a  trust.  He  did  not  disclose  that  transaction  to  Getzel  or  Sterling  until  in  or  about  September  2017. 
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stating  that  during  the  closing  of  the  Cohen-^^^|^^^|  transaction,  Cohen  would  “bring  all 
payments  up  to  date  as  well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  on 
January  24, 2018,  that  at  the  closing  of  the  Cohen-'^^^Jtransaction,  Sterling  provide  a  letter 
stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal  guarantees  of  the 
medallion  loans  had  been  terminated. 

r.  The  Cohen-^^^^^|transaction,  however,  did  not  close.  On  or  about  January 
■297^0187the^^^^^^^|’'^attorney  emailed  attomeys-for^Sterling  and  stated-that— at  this-time 
there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have  changed  and  we  are  not  prepared 
to  go  forward.” 

s.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  loiow  that  after  the  Cohen-j^^^^Hdeal  fell  apai*t. 
Sterling  assigned  Cohen’s  loans  to  Sterling  Employee-3,  who  specializes  in  collecting  on 
defaulting  loans.  From  my  participation  in  an  intei-view  with  Sterling  Employee-3,  my  review  of 
telephone  call  notes  taken  by  Sterling  Employee-3,  and  my  review  of  telephone  records,  I  know 
that  Sterling  Employee-3  spoke  several  times  to  Cohen  on  or  about  January  30, 20 1 8  about  paying 
down  and/or  restructuring  Cohen’s  outstanding  taxi  medallion  loans.  On  the  calls,  which  in  total 
lasted  more  than  an  hour,  Cohen  stated  in  sum  and  substance  that  he  did  not  have  more  than 
$1,250,000  to  pay  toward  the  medallion  loans.  On  the  call,  in  the  course  of  reviewing  the  failed 
Cohen-^m^l  transaction.  Sterling  Employee-3  questioned  Cohen  about  the  price 

^^^^^|vas  to  have  paid  for  each  medallion,  and  whether  there  was  a  side  agreement  between 
Cohen  and  Cohen  denied  that  there  was  any  side  agreement  with|^^[[[[| 

t.  On  or  about  Januaiy  31,  2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
paying  $500,000  to  bring  the  loans  current  and  $750,000  to  bring  the  principal  balance  to 
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$20,500,000.  Cohen  also  suggested  revised  monthly  interest  payment  amounts.  The  signature 
block  on  the  email  indicated  that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  On  or 
about  January  31,  2018,  Sterling  Employee-3  responded  to  Cohen  and  stated,  in  sum  and 
substance,  that  Cohen  would  need  to  pay  the  entirety  of  the  overdue  payments  and  pay  down  the 
principal  balance  of  the  loan  to  $20,000,000  (in  total,  a  payment  of  approximately  $1,750,000), 
and  would  need  to  make  lai-ger  monthly  interest  payments. 

- IT-CSibrabbut FebfuafyTT^O  187 Cohen-emailed  Sterling-Employee»3  and-proposed 

“[pjayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if  [Sterling]  will  waive 
past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $1.250m.”  (Emphasis  in  original.) 
Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial  resources  to  post 
additional  collatei-al  or  pre-fund  monthly  payments.  The  signature  block  on  the  email  indicated 
that  Cohen’s  address  was  the  addi-ess  for  Subject  Premises-2.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-3,  I  have  learned  that  since  January  30,  2018,  Sterling  has 
continued  to  renegotiate  the  medallion  loans  with  Cohen  based  on  Cohen  s  representations  about 
his  current  financial  position.  In  particular,  according  to  Sterling  Employee-3,  Cohen  and  SterUng 
have  an  agreement  in  principal  to  restructure  Cohen’s  loans  based  in  part  of  Cohen’s  agreement  to 
make  a  principal  payment  of  approximately  $750,000,  to  make  a  payment  of  $500,000  to  become 
current  on  interest  payments,  and  to  post  $192,000  in  cash  collateral  for  his  future  monthly 
payments  on  the  loan.  Cohen  also  agreed  to  pledge  an  interest  he  had  in  a  property.  Sterling 
Employee-3  has  stated  that  had  Cohen  indicated  he  had  more  than  $1,250,000  available  to  him. 
Sterling  would  have,  among  other  things,  negotiated  for  a  larger  reduction  to  the  principal  amoruit 
of  the  loan. 
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(ii)  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 

17.  As  set  forth  in  detail  below,  despite  multiple  written  and  oral  representations  by 
Cohen  to  Sterling  (and,  by  extension,  Melrose^®)  that  he  had  insufficient  funds  to  pay  down  the 
principal  balance  of  the  medallion  loans,  malce  monthly  interest  payments,  or  pay  past-due 
amounts,  it  appears  that  between  2016  and  the  present,  Cohen  opened  and  maintained  bank 

aGcounts-at-FirsCRepublic-Banlc- (“First  Republic!!), _  and  then  received-millions  of-dollars_iiL 

consulting  payments  in  these  accounts,  which  he  did  not  disclose  to  Sterhng.  Cohen  set  up  these 
accounts  and  received  these  funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling 
about  his  personal  finances  (including  his  assets  and  liabilities)  and  his  ability  to  make  payments 
on  the  medalhon  loans.  In  these  disclosures  to  Sterling— and  despite  being  asked  about  these  bank 
accounts  by  his  accountant^ — Cohen  misled  the  banlc  by  claiming  he  had  insufficient  liquidity  to 
satisfy  his  obligations  or  meet  the  bank’s  demands,  while  withholding  information  about  these 
ongoing  revenue  streams  and  liquid  financial  assets  at  First  Republic. 

18.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced 
pursuant  to  a  subpoena  by  Fii-st  Republic,  and  my  participation  in  and  review  of  reports  of 
interviews  Avith  a  First  Republic  sales  manager  (“Fii'st  Republic  Employee-1”)  and  a  First  Republic 
senior  managing  director  (“First  Republic  Employee-2”),  I  have  learned,  among  other  things,  the 
following: 


Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,  1 
have  learned  that,  pursuant  to  the  participation  agi-eement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Melms^^h^ 
Melrose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen-'^^^^^ 
fansaction.  Based  on  my  review  of  reports  of  interviews  wifi^^elros^mployees,  1  also  Know 
that  Cohen  called  employees  at  Melrose  regarding  the  Cohen-^^^^^|xansaction. 
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a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approxuuately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts  at  First  Republic,  some  in  his  own 
name  and  others  in  the  names  of  corporate  entities.  According  to  First  Republic  s  know-your- 
customer  records  on  Cohen,'’  his  primary  physical  address  is  the  address  for  Subject  Premises-1. 

b.  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 

ConsrniEts^cc6uht”)7CbEeirw^the^ly^thorized"signatoixon"theaccount.-Acc 

account  opening  documents,  the  primary  address  for  Essential  Consultants  LLC  was  the  address 
for  Subject  Premises-1.  When  Cohen  opened  the  Essential  Consultants  Account,  First  Republic 
Employee-1  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account  ^the  answers  to  which  First  Republic 
Employee-1  entered  into  a  form"*— Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
worlc,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Cohen  also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the 
revenue  from  his  consulting  business — -which  he  said  was  not  his  main  source  of  income  separate 
from  his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen  s 
statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  as  described  below,  the  account  was  not  intended  to  receive  ^and  does  not 


Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

First  Republic  Employee-1  fu  st  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel,  First 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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appear  to  have  received — ^money  in  connection  with  real  estate  consulting  work;  in  addition,  the 

aceount  has  received  substantial  payments  from  foreign  sources. 

c.  I  know  from  my  review  of  First  Republic  bank  records  that  were  scheduled  by  an 
FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  fi-om  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 

■fibnrmy  revreWT)f  th^  Essential  Consultants~Account-schedule  and-publiG-sourGes5Hcnow-the- 

following: 

i.  Beginning  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  into  the  Essential  Consultants  Account  from  an  entity  called  Columbus  Nova 
EEC.  According  to  public  sources,  Columbus  Nova  is  an  investment  management  firm  controlled 
by  Renova  Group,  an  industrial  holding  company  based  in  Zurich,  Switzerland  that  is  controlled 
by  Russian  national  Viktor  Vekselberg.  From  January  2017  to  August  2017,  the  Essential 
Consultants  Account  received  seven  payments  totaling  $583,332.98  from  Columbus  Nova  EEC. 

ii.  Beginning  on  or  about  April  5,  2017,  the  Essential  Consultants  Account 
began  receiving  payments  from  Novartis  Investments,  SARE,  which  I  believe  to  be  the  in-house 
financial  subsidiary  of  the  Swiss  pharmaceutical  company  Novaifis  International  AG  (“Novartis”). 
Between  April  2017  and  Februaiy  2018,  the  Essential  Consultants  Account  received  eleven  wire 
payments  from  a  Swiss  banlc  account  held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980, 
for  a  total  of  $1,099,780. 

iii.  Beginning  in  or  about  April  20 1 7,  the  Essential  Consultants  Account  started 
receiving  wire  payments  from  a  banlc  account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  sent  $100,000  to  the 
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Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  ten  $50,000  payments  from  AT&T.  In  total,  AT&T  sent 

$600,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10,  2017,  June  9,  2017,  July  10, 2017,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is^Korea  Aerospace  Industries  Etd7^(‘lCAI”).^^  K^  Korea“based^eompany“that 

produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 

Department  of  Defense,  among  other  customers. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertsbank,  a  Kazakhstani  bank.  The  listed  account 
holder  at  Khzkommertsbank  was  a  second  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 

vi.  In  total,  from  on  or  about  January  31, 2017  to  on  or  about  February  1, 2018, 
the  Essential  Consultants  Account  received  approximately  $3,033,112,98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  J anuary  1 0, 20 1 8,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23.  Cohen’s  withdrawals  from  the  Essential  Consultants 
account  reveal  that  it  was  used  for  lai-gely  personal  purposes,  including  to  pay,  among  other  things, 
American  Express  bills  and  fees  from  “the  Core  Club,”  a  private  social  club  in  New  York. 

d.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P  .C.  (the  “MDC&A  Account  ). 
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Cohen  was  the  only  authorized  signatory  on  the  account.  According  to  account  opening 
documents,  the  primary  address  for  MDC&A  Account  was  the  address  for  Subject  Premises-1. 
Among  other  things,  the  MDC&A  Account  received  ten  wire  transfers  and  one  check  from  an 
accoxmt  in  the  name  of  Squire  Patton  Boggs,  a  law  firm.  As  noted  above,  Subject  Premises-2  is 
located  inside  the  New  York  office  of  Squire  Patton  Boggs.  In  total,  fi-om  on  or  about  April  5, 
2017,  to  on  or  about  January  2, 2018,  the  MDC&A  Account  received  $426,097.70  in  deposits,  and 

Ihehalmce  in  the-accounCas  oYJanuary-272018rwas  $344754«5— As  discussed  belowrCohen 

never  disclosed  any  of  the  balance  in  the  Essential  Consultants  or  MDC&A  accounts  to  Sterling 


transaction  or  the  subsequent  loan 


during  the  negotiations  with  respect  to  the 


refinancing  negotiations,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

19.  Based  on  my  review  of  emails  that  were  seized  pursuant  to  the  Cohen  Email 
Warrants,  and  my  review  of  reports  of  interviews  with  employees  of  AT&T  and  Novartis,  it 
appears  that  the  aforementioned  payments  to  the  Essential  Consultants  Account  and  MDC&A 
Account  were  for  political  consulting  work,  including  consulting  for  international  clients  on  issues 
pending  before  the  Trump  administration.  Specifically,  from  my  review  of  emails  fi'om  the  Cohen  | 

Gmail  Account,  the  Cohen  MDCPC  Account,  and  public  sources,  I  have  learned  the  fiallowing:  j 

a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe  I 

is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  “Consulting  Agreement”  between  KAI  and 
Essential  Consultants  dated  as  of  about  May  1,  2017.  The  agreement  indicates  that  Essential 
Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that  Essential  ^ 

I 

Consultants  would  render  “consulting  and  advisory  services,  as  requested”  by  KAI,  and  that  KAI  t 

would  pay  Essential  Consultants  “a  consuWng  fee  of  One  Million  Two  Hundred  Thousand 
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($1,200,000.00)  US  Dollars,”  disbursed  through  eight  $150,000  installments  between  May  2017 
and  December  2017.  I  have  also  reviewed  invoices  in  amounts  of  $150,000  that  Cohen  emailed 
to  an  individual  whom  I  believe  is  affiliated  with  ICAI.  At  the  top  of  the  invoices  the  address  listed 

for  Essential  Consultants  is  the  address  for  Subject  Premises-2. 

b.  On  or  about  May  8,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe  is 

affiliated  with  BTA  Bank.  The  signature  block  on  Cohen’s  email  listed  “Essential  Consultants 

lXC’and--Mch^P:CbEenira^iates7EC’’anTprovidedrfc 

2.  In  die  email,  Cohen  attached  a  document  purporting  to  be  a  “Consulting  Agreemenf  ’  between 
BTA  Bank  and  Essential  Consultants  dated  as  of  about  May  8, 2017.  The  agreement  indicates  that 
Essential  Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that 
Essential  Consultants  would  render  “consulting  and  advisory  services”  to  BTA  Bank,  and  that 
BTA  Bank  would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Eight  Hundi-ed 
Thousand  ($1,800,000.00)  US  Dollars,”  disbursed  thi'ough  monthly  payments  of  $150,000.  On  or 
about  May  10, 2017,  Cohen  sent  an  email  to  an  employee  of  BTA  Bank,  and  attached  to  the  email 
an  invoice  to  BTA  Banlc  in  the  name  of  Essential  Consultants,  with  the  address  of  Subject  Premises- 
2.  The  invoice  contemplated  a  $150,000  payment  to  Essential  Consultants  for  a  “monthly 

consulting  fee.” 

c.  On  or  about  January  23,  2017,  Cohen  appears  to  have  entered  into  a  consultmg 
agreement  with  AT&T,  which  contemplates  that  Essential  Consultants  “shall  render  consultmg  and 
advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential  Consultants]  of  those  issues 
and  matters  with  respect  to  which  AT&T  Services  desires  [Essential  Consultants]’s  assistance  and 
advice.”  The  agreement  indicates  that  Essential  Consultants  had  the  address  of  Subject  Premises- 
1.  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his  services  ...  a  consulting  fee  of  Fifty 
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Thousand  ($50,000)  Dollars  ...  per  month.”  Based  on  my  review  of  reports  of  intei-views  with 
AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen  to  consult  on  political  issues, 
including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner,  and  tax  reform. 

d.  On  or  about  March  1,  2017,  Cohen  appears  to  have  entered  into  a  contract  between 
Novartis  and  Essential  Consultants,  which  provides  that  Essential  Consultants  will  provide 
consulting  and  advisory  services  to  Novartis  on  matters  that  relate  to  the  repeal  and  replacement  of 
Ihe^  AiMffile  Care  Acf  in  the  US-Md^any^other  issues-mutually^  a^  (Essential— 

Consultants]  and  Novartis.”  The  contract  provides  for  a  “consulting  fee  of  One  Million  Two 
Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to  Essential  Consultants  m  equal  monthly 
installments  over  the  eourse  of  a  year.  Based  on  my  review  of  reports  of  interviews  with  Novartis 
employees,  I  have  learned  that  Novartis  retained  Cohen  to  provide  political  consulting  services  and 

to  gain  aeeess  to  relevant  policymakers  in  the  Trump  Administration. 

e.  In  or  about  February  2017,  Cohen  began  negotiating  the  terms  of  a  “strategic 
alliance”  with  Squire  Patton  Boggs.  On  or  about  March  4,  2017,  Squire  Patton  Boggs  emailed 
Cohen  a  “strategic  alliance  agreement.”  Under  the  terms  of  the  agreement,  Cohen  agreed  to 
generate  business  for  the  law  fum,  and  Squire  Patton  Boggs  agreed  to  pay  to  Cohen  “an  annual 
strategic  alliance  fee  of  $500,000,  payable  in  twelve  (12)  equal  monthly  installments.”  Sqiure 
Patton  Boggs  also  agreed  to  provide  Cohen  with  “dedicated  and  segregated  office  space  in  [Squire 
Patton  Boggs’s]  New  York  and  Washington  D.C.  offices,  which  office  space  shall  be  physically 
separate  fi-om  [Squire  Patton  Boggs’s]  offices  and  have  locked  doors  and  its  own  locked  file 
cabinets.”  On  or  about  April  3,  2017,  Squire  Patton  Boggs  announced  on  its  website  that  is  had 
formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would  “jointly  represent 

clients.” 


2017.08.02 


29 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  30  of  269 


20.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
provided  by  Getzel  (as  noted  above,  Cohen’s  accountant  at  the  time),  my  participation  in  an 

my  and  ^ 

have  learned  the  following: 

- — aT“In  or  about-Ma:y  -2017rGetzel  met^with-Cohen-at  Subject-Premises=2.- At  the- 

meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice  called  Michael 
D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants  LLC.  Cohen 
told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in  connection  with 
his  law  practice,  and  that  he  expected  gross  revenues  for  die  consulting  business  to  be  between  five 
and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  in  which  Getzel 
wrote  that  “[a]ttached  is  a  draft  of  the  new  PFS  as  of  September  30,  2017”  and  attached  a  draft  of 
the  September  2017  Financial  Statement.  The  draft  statement  reflected  that  as  of  September  30, 
2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately  $33,430,000  (comprised  of 
taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence  and  property),  and  liabilities 
of  approximately  $45,630,000,  leaving  hhn  purportedly  over  $12  million  in  debt.  In  the  same  email, 
Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact  that  the  financial  statement  did  not 
list  any  value  associated  with  either  the  Essential  Consultants  Account  or  the  MDC&A  Account; 
“[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  -  Michael  D.  Cohen  &  Associates 


2017.08.02 


30 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  31  of  269 


POC  [sic]  and  Essential  Consultants  LLC.  Please  advise  whether  or  not  these  should  be  disclosed 
and  what  value.” 

c.  On  or  about  October  6, 2017,  Cohen  called  Getzel  by  telephon^which  is  reflected 
on  toll  records  for  Cohen’s  cellphone— and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value.  On  or  about  October  6,  2017,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 

“A^ounfres^dedtoiGetzers email witfrthe-answer“[l]ooksgood'tome7’  Cohen never^ 

Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 
Statement.  In  a  letter  dated  October  6,  2017,  addressed  to  Getzel,  Cohen  stated,  “I  have  reviewed 
the  attached  statement  of  financial  condition  and  find  it  to  be  correct  and  consistent  with  the 
representations  that  I  made  to  your  firm.  The  attached  is  an  accurate  reflection  of  my  assets, 
liabilities  and  net  worth  (deficit)  as  of  September  30,  2017.”  Attached  to  that  letter  was  the 
September  2017  Financial  Statement,  which,  as  noted  above,  was  then  transmitted  to  Sterling  m 
connection  with  the  proposed  taxi  medallion  transaction  between  Sterling,  Cohen,  and 

21 .  Based  on  my  review  of  a  report  of  an  interview  with  Sterling  Employee-1, 1  have 
learned  that  Cohen  did  not  disclose  his  income  stream  fiom  Essential  Consultants  to  Sterling 
Employee-1  or,  to  his  knowledge,  anyone  else  at  Sterling.  According  to  Sterling  Employee-1, 
knowledge  of  such  an  income  stream  would  have  affected  Sterling’s  demands  during  the 
negotiations,  particularly  with  respect  to  the  amount  of  a  principal  paydown  of  Cohen’s  debt. 

Cohen  Understated  His  Available  Cash 

22.  hi  addition  to  withholding  the  existence  of  his  Essential  Consultants  income  fi-om 
Sterling  and  Melrose,  it  appeai-s  that  Cohen  also  substantially  understated  his  available  cash  and 
cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  from  my  review  of  the  September 
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2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen  represented  that  he  had 
$1,250,000  in  cash  as  of  September  30,  2017.  I  also  know  that  on  or  about  January  30,  2018,  in  a 
telephone  call  with  Sterling  Employee-3,  and  on  February  1,  2018,  in  an  email  to  Sterling 
Employee-3,  Cohen  represented  that  he  did  not  have  more  than  $1,250,000  in  cash.  But,  from  my 
review  of  a  summary  of  bank  records  that  were  scheduled  by  forensic  accountants,  I  have  learned 
that  Cohen  had  approximately  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30, 2017. 

Addltioirally,  as  5fTebruaiyn7  2018,-Cohen  had  approximately  $6,000,000  in-cash-an^^ 
equivalents.  Specifically,  from  my  review  ofthe  account  schedule  and  bankrecords,  I  have  learned 

the  following; 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Banlc.  As  of  February  1, 

2018,  Cohen  had  a  total  of  $1,389,245.78  in  these  accounts. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 

As  of  February  1, 2018,  Cohen  had  $1,284,996.13  in  these  accounts. 

c.  As  of  September  30, 2017,  Cohen  had  $260,689.1 8  in  an  account  at  Signatui'e  Bank. 

As  of  February  1, 2018,  Cohen  had  $261,517.55  in  this  account. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30.  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic.  As  of  February  1, 2018,  Cohen  had  $3,332,992.95  in  these  accounts. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30, 2017. 

f.  As  of  September  30, 2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank— one  in  his  name  and  one  held  jointly  with  his 
wife.  Cohen  also  has  a  safety  deposit  box  at  TD  Bank— Subject  Premises-3.  The  safety  deposit 
box  was  opened  on  December  13, 2017  in  the  names  of  Michael  and  Laura  Cohen. 

- hr"InTotal7asofSeptemberA0r20T7yGohenhadatleast$4,713v935.08inhisaGGOunts 

at  Capital  One  Bank,  City  National  Banlc,  Signature  Bank,  Sterling  Bank,  Bethpage  Credit  Union, 
First  Republic,  and  Morgan  Stanley.  As  of  February  1,  2018,  Cohen  had  $6,268,732.59  in  his 
accounts  at  Capital  One  Bank,  City  National  Banlc,  Signature  Bank,  First  Republic,  and  Morgan 
Stanley.^^ 

23.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  written  and  oral 
representations  to  Sterling  and  Mehose  that  he  did  not  have  more  than  $1,250,000  were  false,  and 
that  Cohen  withheld  information  regarding  approximately  $5  million  in  funds  from  Sterling  and 
Melrose  in  order  to  secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on 
my  participation  in  an  interview  with  Sterling  Empioyee-2,  and  my  review  of  reports  of  interviews 
with  Sterling  Employee-1  and  two  Mehose  employees,  it  is  my  understanding  that  that  Sterling 
and  Mehose  would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to 
renegotiate  Cohen’s  medallion  loans  and  on  what  terms,  or  to  its  decision  whether  approve  of  the 
transfer  of  those  loans  to 

Based  on  my  review  of  the  account  schedules  described  above,  I  know  that,  as  of  the  date  of  this 
affidavit,  the  account  balances  for  TD  Banlc  have  not  yet  been  included  in  the  schedule  for  either 
date  and  the  account  balances  for  Sterling  National  Bank  and  Bethpage  Credit  Union  have  not  yet 
been  included  in  the  schedule  for  February  1,  2018.  Thus,  to  the  extent  that  these  accounts  have 
positive  balances,  Cohen’s  total  balances  in  fact  were  even  higher  on  these  dates. 

33 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  34  of  269 


Cnhen  Has  Unreported  Interest  Income 

24.  It  appears  that  Cohen  also  hid  from  Sterling  interest  income  that  he  was  reeeiving  in 
connection  with  a  six  million  dollar  loan  he  made  to  another  individual.  Specifically,  I  know  from 
my  review  of  the  May  2017  Financial  Statement  and  September  2017  Financial  Statement  that 
Cohen  provided  to  Sterling  that  Cohen  did  not  disclose  that  he  had  made  a  note  receivable  in  the 
amount  of  approximately  $6  million,  or  that  he  was  earning  approximately  $60,000  per  month  m 

“interesfineome  in  eonnection  with  thafloan— Buf-from-my-review  of  a  summary  otbank-reeords 

that  were  reviewed  by  another  law  enforcement  agent,  my  review  of  property  records  and 
documents  obtained  pursuant  to  the  Cohen  Email  Warrants,  and  my  participation  in  an  interview 
with  Getzel,  I  have  learned  the  following: 

a.  Based  on  my  review  of  property  records,  I  have  learned  that  on  or  about  Mareh  12, 

to  lend  ^^^^l^^^^^^^^^^pproximately 
$2,000,000.^°  It  appears  that  the  promissoiy  note  was  unsecured  by  any  real  property.  On  or  about 
April  28,  2014,  Cohen  and  amended  the  promissory  note,  and  restructured  the  loan  to 

inerease  the  principal  amount  to  approximately  $5,000,000.  Under  the  terms  of  the  amended 
promissory  note,  the  loan  was  secured  by^^^^^J  apartment  in  Sunny  Isles  Beach,  Florida.  On 
or  about  April  8,  2015,  Cohen  and  ^^^|restated  the  promissory  note  to  increase  the  prmcipal 

amount  to  $6,000,000.^^ 

b.  Based  on  my  review  of  a  copy  of  the  restated  note,  which  was  obtained  pursuant  to 
the  Cohen  Email  Warrants,  I  have  learned  that  under  the  terms  of  the  amended  and  restated 


I  learned  from  Getzel  that 


The  note  states  that  the  loan  is  to 
jointly  and  severally.  For  ease  of  reference,  I  refer  simply  to  “ 


husband  and  wife, 
lerem. 
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promissory  note,  Cohen’s  loan  to^^^^|s  an  interest-only  loan,  and  that  the  principal  balance 
of  the  loan  bears  interest  at  an  annual  rate  of  12.25  percent.  I  also  know  that  the  amended  and 
restated  promissory  note  includes  a  schedule  of  payments  that  require  ^^^|to  pay  Cohen 
approximately  $61,250  per  month  beginning  in  April  2015  and  ending  in  April  2019.  The  note  also 
requh'es  tlia1^^^^^|’epay  the  principal  balance  of  $6,000,000  on  April  28,  2019. 

c.  Based  on  my  review  of  banlc  records,  I  have  learned  that,  consistent  with  the  terms 

-of  the-  amended— and-restated-promissory  -noter-^^^^l  has -made  monthly  ^payments  oC 

approximately  $61,250  since  April  2015.  Specifically,  based  on  my  review  of  records  maintained 
by  Capital  One  Bade,  I  have  learned  that  horn  April  2015  to  October  2015,  Cohen  received  checlcs 
from  an  entity  called^^^^^^^^^^^^^^^^|.  totaling  $61,250  per  month,  which  he 
deposited  into  his  personal  bade  account  at  Capital  One  Bank.^^  It  appears  horn  my  review  of  bank 
records  and  pubhc  sources  that  l^^^^|is  the  owner  of 

From  my  review  of  records  maintained  by  Capital  One  Bade,  I  have  also  learned  that  since  October 
2015,  Cohen  has  received  checks  horn  an  entity  called  i||||||||||||^^  totaling 

$61,250  per  month,  which  he  deposited  into  his  personal  bank  account  at  Capital  One  Bade.  It 
appeal's  fi'om  my  review  of  bank  records  and  public  som'ces  that  s  also  the  owner  of 

total,  it  appears  that  Cohen  receives  approximately  $735,000  per  year 

in  interest  payments  horn 

d.  Based  on  my  review  of  Cohen’s  May  2017  and  September  2017  Financial 
Statements,  my  review  of  his  20 1 5  and  20 1 6  tax  returns  obtained  via  subpoena  and  fi'om  the  Cohen 
Email  Warrants,  and  my  participation  in  an  interview  with  Getzel,  I  have  learned  that  Cohen  did 


In  April  2015,  Cohen  received  a  pro-rated  payment.  For  all  months  thereafter,  the  total  payment 
equaled  $61,250,  but^^^^Hiften  made  the  payment  m  multiple  checks. 
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Ito  Sterling  or  Melrose,  or  list  it 


not  disclose  this  interest  income  he  was  receiving  from^H 
on  his  tax  returns.  I  have  also  learned  that  while  this  interest  income  is  taxable,  Cohen  did  not  tell 
Getzel-his  aeconntant-about  the  income,  and  Qetzel  only  learned  about  the  income  because  he 
began  doing  ^^^^taxes  in  2017?^ 

25.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to 

Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen 

in-order  to- 


withheld  information  relating  to  the  interest  income  he"  is  receiving  from^^^^ 
secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan. 

rntieu  Had  a  Side  AgreemgntWjdL^^^^^B 
26.  As  set  forth  in  detail  below,  during  the  course  of  Cohen’s  negotiations  to  sell  his 


interest  in  taxi  medallions  and  the  associated  debt  to 


Cohen  not  only 


misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  agreement  he 


had  negotiated  with| 


I  it  appears  that 


|,greed  to  pay  an  above-market  price 
lipproximately 


for  Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay  | 

$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  my  participation  in  interviews  with  Sterling  Employee-1,  Sterling  Employee-2, 
and  Sterling  Employee-3, 1  have  learned,  among  other  things,  the  following: 

a.  On  or  about  September  5, 2017,  an  executed  tenn  sheet  was  circulated  by  Sterlmg 


Employee- 1  to  Cohen  and  j 


Subject  Premises-1 .  According  to  the  teim  sheet, 

from  Sterling  and  Mehose,  to  be  secured  by  the  medallions  that 


The  term  sheet  listed  Cohen’s  address  as  the  address  for 

|vould  borrow  $20,000,000 
[was  to  acquire  from 


Accordingly,  this  interest  incomr^which  should  have  been  reported  as  such  on  Cohen’s  tax 
returns— is  included  herein  in  calculations  of  Cohen’ s  true  cash  position. 
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Cohen.  At  a  price  of  $20  million  for  thirty-two  taxi  medallions,  the  proposed  transaction  valued 
each  medallion  as  worth  $625,000.  The  term  sheet  also  contemplated  a  $1,265,913  pay-down  of 
the  principal  balance  of  the  loan.  The  term  sheet  made  no  mention  of  a  $3.8  million  payment  from 
Cohen  toHH^H  or  any  other  form  of  payment  or  financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 
describing  the  terms  of  the  Cohen-^^^Btransaction  and  the  new  loan  to  ^^^^^Hdid 

liot  menficiran^pa>mients  from  Cohemto-^^^^^Bincluding-a  $3v8~million  payment.-*!^ 

memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medallion”  but  “it  is  recognized  that  this  is  not  in  line  with  current  mai'ket  values.”  Indeed, 
according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
2018,  taxi  medallions  sold  for  amounts  ranging  from  $120,000  to  $372,000.  According  to  Sterling 
Employee-1  and  Sterling  Employee-2,  they  were  never  told  that  ^^^frgreed  to  a  purchase 
price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  make 

any  payment  to 

c.  On  or  about  January  30,  2018,  Sterling  Employee-3  asked  Cohen  whether  Cohen 
had  a  side  agreement  with  ^^H^o  pay  sum  of  money  for  entering  into  the 

medallion  transaction.  Sterling  Employee-3  asked  Cohen  about  such  an  arrangement  because, 
according  to  Sterling  Employee-3,  the  price  that  ^^^^was  paying  for  each  medallion 
appeared  to  be  well  above  the  market  price.  Cohen  stated,  in  sum  and  substance,  that  he  had  no 

side  agreement — and  never  had  a  side  agreement 

27.  While  Cohen  and^^^^|  did  not  disclose  any  payment  from  Cohen  to 

^^^^in  communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  my  participation  in  an  interview 


2017.08.02 


37 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  38  of  269 


with  Geteel,  I  have  learned  the  following,  in  substance  and  in  part,  regarding  the  proposed  side 
payment  from  Cohen 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  “Getzel  Memorandum”). 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and 
in  part,  as  follows;  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 

^nMestoaBuyer  whb  will^ssumElheif  b^  in4^^^^ 

debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3, 800,000. 

b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 
payment  of  $3,800,000  to  |||||[|||but  Getzel  did  not  loiow  where  Cohen  was  going  to  obtain 
$3,800,000  to  pay  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 

cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $1 .25  million  in  cash. 

28.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Mehose,  the  bank 

with  the  partieipaang  interest  m  the  loans)  and  reports  of  interviews  of  representatives  of  Sterling 

(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and^^|vas  aware  of  the  planned  $3.8  million 

side  payment  from  Cohen 

The  Illegal  Campaign  Contribution  Scheme 

29.  The  USAO  and  FBI  are  also  investigating  a  criminal  violation  of  campaign  finance 

laws  by  Michael  Cohen.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen  made 


24  Tho  reference  to  thirteen  medallions  appears  to  be  an  error  by  Geteel.  Cohen  and  his  wife 
together  ovmed  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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an  excessive  in-kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald 
Trump  in  the  form  of  a  $130,000  payment  to  Stephanie  Clifford,  an  individual  who  was  rumored 
to  have  had  an  extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that 
alleged  affair.  As  set  forth  below,  there  is  probable  cause  to  believe  that  this  payment  was  intended 
to  keep  Clifford  from  maldng  public  statements  about  the  rumored  affair  on  the  eve  of  the  2016 
presidential  election,  and  thus  constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 
20]  From  my  review^bf  public  sour^S7Thave  learhedThe  followings 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  acfress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occuiTed  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  then  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  11, 2011,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  fi-om  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  E!  News  that  “[t]he  totally  untrue  and  ridiculous  story  . . .  emanated  from 

a  sleazy  and  disgusting  website. . .  .The  Tiump  Organization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit .  .  .  [and]  Mr.  Trump  and  die  Trump  Oi'ganization  would  like  to  thank  and  commend 

Stormy  Daniels  and  her  attorneys  for  then  honesty  and  swift  actions.  ’ 

31.  On  or  about  June  16,  2015,  Trump  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4,  2016,  Trump  became  the  presumptive  Republican  Party  nominee 
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for  president,  and  on  Wy  19.  2016,  Trump  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  18, 2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 

32.  On  or  about  October  7,  2016,  The  Washington  Post  published  online  a  video  and 

■^^panying  audio  in  which  TTiibp“rbferfed-t6rw6me^ 
terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The 
following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he  stated,  among  othei 
things,  “I’ve  said  and  done  things  I  regi-et  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  knows  me  loiows  these  words  don’t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that 
representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

33.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Stale 
by  a  reporter  who  interviewed  Clifford,  I  have  learned  that  around  this  same  time,  in  or 
about  October  2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and 
Slate  magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement 
about  her  alleged  reladonship  with  Trump.  According  to  the  article  in  Slate,  which  the  author 
based  on  conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to 
be  paid  for  her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized 
in  a  201 8  email  obtained  pursuant  to  the  Cohen  Email  Warrants!  “In  October  2016, 1  was  contacted 


40 


2017.08.02 


Case  l:18-cr-00602-WHP.  Document  48-1  Filed  07/18/19  Page  41  of  269 


by  counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  20 1 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

34.  From  my  review  of  telephone  toll  records^^  and  information  produced  pursuant  to 
the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 

Incr(“AMI’’)7tltrpublisher  of  the  iVaho«£3[/”EngM/re7-^^  Trumprand  Hope  Hicksrwho-was  then- 

press  secretary  for  Trump’s  presidential  campaign.  Based  on  the  tuning  of  these  calls,  and  the 
content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  fi-om  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following; 

a.  On  October  8, 20 1 6,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes. 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 


My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
atfidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pursuant  to  the  iCloud  Warrant. 

Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

I  believe  that  Tramp  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talldng  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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Cohen  had  received  or  made  to  ffioks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 

about  once  a  month  prior  to  this  date  -  specifleally,  prior  to  this  call  on  October  8.  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 

in  September. 

b.  Approximately  ten  minutes  after  the  call  ended.  Kicks  and  Cohen  spoke  agam  for 
about  two  minutes. 

- - ^,7-xr7:39T:m-immediately-afier  the-second  call  with  mcks- 

David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thu-ty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howai-d  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regulai-ly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 

other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
toee  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 

eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howanl  hung  up  fiom  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keitli  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  invesUgation,  I 
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believe  that  when  Howard  wrote  “Keith  ”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:31  a.m.,  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Thankyon.”  Eight  minutes  later,  Cohen  sent  Howard  atext  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  walce, 

please  call  my  cell.” 

f.  nie  following  day,  on  October  10, 2016,  at  10:58  a.m.,  Howard  sent  a  text  message 

lo'  Cohen'^d  Davidson.  «5h-sTatedr"KeitllMichael:-connecting-you  b^^^^ 

business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanks.  Dylan.  Over  to  you  two.”  At  12:25  p.m.,  Davidson  sent  Cohen  a  text  message 
that  stated:  “Michael  -  it  we  are  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to  be  today. 
Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “elienf’  was 
“confirmed  to  proceed  with  the  opportunity,"  he  was  rcfeiring  to  Clifford’s  agreement  to  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affiiir  wtth 

then-candidate  Trump.^'^ 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  10, 201 6,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 


2S  A,  set  forth  helow  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 

HoweveUecS^the—unicationsweretocloseremporalpro 

the  negotiation  of  a  payment  to  CUfford,  the  executton  of  the  agreement  "“‘'  f ™  . 

eSd  m  agreement  with  AMI  several  months  prior  to  th«re  eommunicattons  hetween  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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accordmg  to  the  agreement,  was  to  define  the  “trae  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  Teggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 

l^;^gaion,lbeM;ve-ilgDavidsbTrsenteohen-this-partially-signed^ide4etter-agreemeat^ 

Older  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 

October  10,  2016. 

35.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
m  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  Som  which 
Cohen  could  transfer  funds  to  Davidson.  Speeiflcally,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iClond  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  First 
RepnbUc,  as  well  as  my  participation  in  interviews  with  First  Republic  employees,  I  have  learned 

the  following; 

a.  On  the  morning  of  October  13, 2016,  at  8:54  a.m,  Cohen  sent  Pecker  atextmessage 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  am.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 

encrypted  calls. 
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b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  First  Republic  Employee- 
2.  The  email  attached  documents  from  the  Seeretaiy  of  State  of  Delaware  indicating  that  Cohen 
had  formed  a  limited  liability  company  called  “Resolution  Consultants  LLC”  on  September  30, 
2016.  As  noted  above,  “Resolution  Consultants”  is  the  name  of  the  entity  that  Cohen  had  told 
Howard  he  had  formed  recently  after  Howard  said  Davidson  would  “do  it.”  At  10:44  a.m.,  Cohen 
called  First  Republic  Employee-2  and  told  him,  in  sum  and  substance,  that  he  needed  an  account 

lnfrirnameof“ResdhrtioiCOT^ltahts’’^Mirmne^dfatefy^^^^ 

on  the  checks  written  out  of  the  account.  Later  that  day,  another  employee  at  First  Republic 
emailed  Cohen  account  opening  paperwork  to  complete.  Cohen  returned  the  account  opening 
documents  partially  completed,  hut  failed  to  provide  a  copy  of  his  driver’s  license  or  passport,  and 
did  not  respond  to  the  employee’s  question  of  how  he  wanted  to  fimd  the  account.  As  a  result,  the 

account  was  never  opened. 

c.  On  October  1 7,  20 1 6,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 

That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

36.  Despite  these  steps  taken  hy  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  CUfford, 
and  they  thi'eatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 

iCloud  Warrant,  and  public  sources,  I  know  the  following: 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’s  email  aecount  hosted  by  the  Trump  Organization,  on  October  17, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.^®  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreemenf  ’  appeal-  to  have  touched  off  a  flurry  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically. 

i.  At  4:43  p.m.,  Howai'd  sent  Cohen  a  text  message  that  stated:  “I’m  told 
they’re  going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded.  Call  me. 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 

Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 

seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

V.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taking  my 

calls.”  Cohen  responded  one  minute  later:  “You’re  Iddding.  Who  are  you  trying  to  reach?” 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  USAO  has  not  requested 
documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the  email 
referenced  in  this  article. 
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investigation,  I  understand  Howard’s  text  messages  to  mean  that  lie  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes, 

c.  The  following  day,  on  October  18,  2016,  TheSmokmgGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 

article  noted  that  Clifford  had  declined  to  comment. 

37.  On  or  about  October  25,  2016,  the  communications  between  Cohen,  Davidson, 

Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford. 
Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email 
Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  followmg: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  statmg: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 

minutes.  At  7:11  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Tmmp  agam  and 
connected  for  a  minute  and  a  half 

c.  At  approximately  9:04  a.m.— less  than  thirty  minutes  after  speaking  with  Tmmp— 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipf  ’  and  then,  in  the  second 
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email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  aan.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  First  Republic  Employee-2  and  told  him,  in  sum 

and  substance,  that  he  decided  not  to  open  an  account  in  the  nameof“Resolution  Consulting”  and 

instead  would  be  opening  areal  estate  consulting  company  in  die  name  of  “Essential  Consultants.” 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Trump  Tower,  and  wanted  to  go  to  a  First 

“^Uc  branch  across  the  strS  to-lTpen-fc rcj»^ 

RepubUe  Employee-1,  a  preferred  banker  at  that  branch,  assist  Cohen.  At  11:00  a.m.  First 
Republic  Employee-1  called  Cohen.  1  know  from  my  paificipation  in  an  mterview  with  First 

RepublieEmployee-l.thataroundthetimeofthecallhewenttoCohen'sofliceinTrumpTower- 

mi  the  same  floor  as  the  Trump  Organization-and  went  through  account  opening  quesUons, 
ineluding  know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  aceount-the  answers  to  which  First  Republic 
Employee-1  entered  into  a  form-^ohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based  on  my  review  of  records  obtained  from  First  Republic,  it  appears  that  this  account  (the 
“Essential  Consultants  Aecounf )  was  created  at  a  time  between  1 1 :00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p  m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Bank. 

f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
tmi^ferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  a,  First  Republic  to  the 
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Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October  26, 
2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  &nds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 

Ifo^a  text  message,  stating:  ‘Tlea^caTllne:!^^ 
and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thanlc  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  LLC,  -  Transfer  of  fimds  on  Thursday  AM  to  be  held  in  escrow  untU  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 

minutes. 

38.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000— with  the 
funds  intended  for  Clifford— for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
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toll  records,  banlc  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen 

Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating;  “Keith,  kindly  confirm  that 

the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  accouut 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  aU 
paperwork  contains  the  correct  name  of  Essential  Consultants  LLC.  I  thank  you  in  advance  for 

your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 

Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account- 
whichhad  been  fiinded  a  day  prior  from  Cohen’s  home  equity  line  of  credit-to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  insfr-uctions  he  sent 

to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9.47  a.m.,  stating.  I 

confirm  that  I  will  work  in  good  faith  &  that  no  fimds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  LLC). 
Plaintiff’s  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 

will  I  disburse.  Fair?” 

d.  At  10:50  a.m.,  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 

payment  had  been  sent  and  providing  him  with  the  wire  number. 

39.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction 

with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant 
to  the  iCloud  Warrant,  public  sources,  and  banlc  records,  I  know  the  followmg: 
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a.  On  October  28, 2016,  at  11:48  a.m.,  Cohen  spoke  to  Trump  for  approxunately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howa-d  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howad. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notaized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanlced  him  and  said  “I  hope  we  ae  good.”  Davidson  responded,  “I 

^sure  you.  We  ae  very  good.”  Howad  afso  t^ted  C5h^^  7^08  p:hh7“KeitlrEDavrdson]-says-- 

we  ae  good.”  Cohen  then  responded  “OK”  to  Howad  and  “Excellent”  to  Davidson.  At 

approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  mmutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howad  and  Davidson. 
Howad  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  ae  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howad  and  ‘Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  refen-ing  to  a  signed  nondisclosm-e  agreement  when  he  told  Cohen  that  he  would 

receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  201 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  infoimation  pertaining  to  [Dennison]”  in  exchange  for 
$130,000.  Die  agreement  provided  that  “EC,  LLC”  would  wire  the  fimds  to  “Peterson’s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 
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LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  refen-ed  to  in  the 
agi'eement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  Die  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confiiination,  stating  that  at  approximately  9:09  a.m.  a  package 

shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Tnimp;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Dump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  pan.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes, 

40.  On  November  4,  20 1 6,  just  three  days  after  the  Clifford  transaction  was  completed 
and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an  article 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
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Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  sour  ces,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — -just  days  before  Election 
Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
fraction.  Specifically,  I  have  learTred  tire  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
witfrHoWard7PeckeFahd  Davidson.  For  ihstahce,  at  approxirMtely"4y49  p^nTTCbhen  senfHowafd^ 
a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump  Orgarrization 
lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  um'eachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeai'ed  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 
want  to  push  her  over  die  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 
position  that  she  is  riglitfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
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plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AM  had  given  McDougal  payments  for  her  role  as  a  puiported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  wEen  he  stated  “he’s 

pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment  from 
AM.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hides  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Agam, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  linlcs  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howai-d  exchanged  several  text  messages  commenting  on  how  the  story  came  across.  The  next 
morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far  I  see  only 
6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying!!  It’s  working!” 
Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
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statement  by  Storm  denying  everything  and  eontradicting  the  other  pom  stars  statement.  I  wouldn’t 
use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on  my 
involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced  recorded 
audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a  statement 
could  be  used  to  influence  potential  negative  media  relating  to  Tmmp,  but  was  unnecessary  at  that 
time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that  morning,  Pecker 

spoke  to  Trump. 

41.  On  or  aboutNovember  8, 2016,  Trump  won  the  election  for  President  of  the  United 

States. 

42.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  fnst  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  government 
watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  malcing  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 

have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 
Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 
Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  afready  denied  the  allegation,  as  Mr.  Trump’s  longtune 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  breaking.  I  knew  the  allegation  to  be  false,  but  I  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn  t 
mean  that  it  doesn’t  create  harm  and  damage.  I  could  not  allow  this  to 
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occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Tramps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  {“...the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  brealcing”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Tramp  Oi'ganization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  awai'e  of  the  payment,  why  Cohen  made  the  payment,  or  whether  smular 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  hun,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  I  can  t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016, 1  used  my  own  personal  funds  to  fecilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbrnsed  me  for  the  payment,  either 
directly  or  indirectly.” 

43.  On  or  about  March  9,  2018,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 
fi-om  my  home  equity  line  and  fransferred  internally  to  my  LLC  account  in  the  same  banlc. 
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44.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that 
Cohen  committed  violations  of  the  Campaign  Finance  Offenses  by  malcing  an  in-ldnd  conh  ibution 
to  Trump  or  the  Tnimp  campaign  in  the  fonn  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the 
eleetion.  Indeed,  while  he  denies  having  given  an  unlawful  contribution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $130,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment 
occurred  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
about  his  b^avior  toward  women,  everTthouglTalleg^ations  of  an  affair“between-Trump  and 
Clifford  existed  since  2011.  In  addition,  the  communication  records  set  forth  above  make  evident 
that  Cohen  communicated  with  members  of  the  Trump  campaign  about  his  negotiation  with 
Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

C.  Probable  Cause  Justifying  Search  of  the  Subject  Premises  and  Subject  Devices 

45 .  Based  on  the  foregoing,  my  review  of  records  produced  pursuant  to  subpoenas  and 
the  Cohen  Email  Wan-ants,  and  the  iCloud  Warrant,  and  my  training  and  experience,  there  is 
probable  cause  to  believe  that  tlie  Subject  Premises  and  Subject  Devices  have  been  used  m 
furtherance  of  the  Subject  Offenses  and  are  lUcely  to  contain  instrumentalities,  evidence,  and  fiTiits 
of  the  Subject  Offenses.  Specifically,  there  is  probable  cause  to  believe  that  Cohen  permanently 
resides  at  Subject  Premises-1  and,  at  least  in  part,  works  at  both  Subject  Premises-l  and  Subject 
Premises-2,  and  that  those  locations  contain  evidence  relating  to  the  Sterling  taxi  medallion 
transaction,  Cohen’s  assets,  Cohen’s  consulting  work  for  Essential  Consultants  EEC,  and  his 
payment  to  Clifford.  Additionally,  there  is  probable  cause  to  believe  that  Subject  Premises-3 
contains  evidence  of  Cohen’s  assets  and  his  payment  to  Clifford.  Finally,  there  is  probable  cause 
to  believe  that  Subject  Premises-4,  in  which  Cohen  is  temporarily  residing,  contains  electronic 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which,  in  turn,  contain  evidence  of  the 
Subject  Offenses,  such  as  evidence  relating  to  the  Sterling  taxi  medallion  transaction,  Cohen  s 
assets,  Cohen’s  consulting  work  for  Essential  Consultants  EEC,  and  his  payment  to  Clifford. 

46.  First,  there  is  probable  cause  to  believe  that  Cohen  lives  and  operates  his  businesses, 
at  least  in  part,  at  Subject  Premises-1.  Specifically,  from  my  review  of  property  records,  I  know 
that  Michael  Cohen  and  Laura  Cohen  own  (in  bust)  Subject  Premises-1.  From  my  review  of 

Cohen’s  tax  returns, Tknbw  He^lists^hi^lprimarybesidence  as  SubjecLPremises-l— Additionally^- 

from  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
routinely  refers  to  Subject  Premises-1  as  his  home.  For  example,  on  or  about  September  28,  2017 
and  October  6,  2017,  Cohen  emailed  individuals  that  his  home  address  is  the  address  for  Subject 
Premises-1.  I  also  know  from  my  review  of  emails  that  Cohen  receives  package  delivery 
notifications  that  list  Cohen’s  address  as  the  address  for  Subject  Premises-1.  Cohen  has  also 
provided  the  address  of  Subject  Premises-1  as  the  address  for  Essential  Consultants  and  Michael 
D.  Cohen  &  Associates,  P.C.  For  example,  the  certificates  of  incoiporation  and  account  opening 
documents  at  Fust  Republic  for  both  entities  list  their  addresses  as  the  address  for  Subject 
Premises-1 .  See  supra  ft  1 8(b),  1 8(d).  The  consulting  agreement  between  Essential  Consultants 
and  AT&T  also  indicated  the  address  for  Essential  Consultants  is  the  address  for  Subject  Premises- 
1.  See  supra^  19(c). 

47.  There  is  also  probable  cause  to  believe  that  Subject  Premises-1  is  likely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  following: 
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a.  According  to  records  maintained  by  Sterling,  the  address  for  all  of  Cohen’s.taxi  | 

medallion  LLCs  is  the  address  for  Subject  Premises-1.  See  supra  11  16(c).  Additionally,  the 
medallion  loan  documents  indicate  that  any  mailings  related  to  the  loans  should  be  sent  to  Sulyect 
Premises-1 .  See  id.  Based  on  my  training  and  experience,  as  well  as  my  review  of  public  sources, 

I  know  that  individuals  keep  records  of  properties  and  assets  in  which  they  have  ownership 

interests.  Accordingly,  I  submit  that  Subject  Premises-1  likely  contains  evidence  of  Cohen’s  j 

ownership  of  TH^^iAnedalhorrEECsr  the-revenue  that  those  medallions-generate,  and- the^-—  | 

transaction  with  Sterling  in  2014  to  re-finance  the  medallion  loans  that  were  then  with  Capital  One  | 


Bank. 


b.  From  my  review 


of  records  maintained  by  Sterling,  I  also  loiow  that  Sterling 


addressed  documents  relating  to  the  transaction  and  Cohen’s  attempts  to  modify  the 

terms  of  the  medallion  loans  to  Subject  Premises-1.  For  instance,  Sterling  addressed  the 
transaction  term  sheet,  supra  f  16(1),  and  its  demand  letter  and  notice  of  default,  see  supra  H 
16(q),  to  Subject  Premises-!.  Accordingly,  Subject  Premises-1  likely  contains  evidence 


cotiCGming  the  T3iiS3.ctioti  sncl  C^onGn  s  nGgOLiav 

records— such  as  records  relating  to  a  payment  foom  Cohen  to 


'ransaction  and  Cohen’s  negotiat?-"-  ^t^-rPner  Some  of  those 


Sterling  and  cannot  be  obtained  via  subpoena  to  Sterling.  Additionally,  even  where  documents 
were  sent  to  Cohen  by  Sterling  (and  therefore  are  available  from  Sterling  via  subpoena),  the  fact 
that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to  Cohen’s  possession  or  knowledge 


were 


of  the  documents. 


c.  From  my  review 


of  records  maintained  by  First  Republic,  I  know  that  Cohen 


provided  the  address  for  Subject  Premises-1  as  the  mailing  addresses  for  the  Essential  Consultants 
Account  and  MDC&A  Account.  See  supra  18(b),  18(e).  Accordingly,  it  is  likely  that  Subject 
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Premises-1  contains  records  relating  to  the  Essential  Consultants  Account  and  MDC&A  Account, 
including,  among  other  things,  account  opening  documents,  bank  statements,  documents  provided 
as  part  of  the  know-your-customer  process,  any  notes  made  by  Cohen  when  he  was  opening  the 
accounts,  wire  transfer  records,  and  canceled  checks.  Even  where  these  records  can  be  obtained 
from  First  Republic,  the  fact  that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to, 
among  other  things,  Cohen’s  ownership  of  the  accounts,  or  his  knowledge  of  transactions  or  the 

existence  of  fundsTn  accounf^ 

d.  Based  on  my  review  of  records  maintained  by  Capital  One  Bank,  TD  Bank,  Morgan 
Stanley,  City  National  Bank,  Signature  Banlc,  and  Bethpage  Credit  Union,  I  know  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  for  his  accounts  at  each  of  these 
financial  institutions.  Accordingly,  it  is  likely  that  Subject  Premises-1  contains  records  relating  to 
these  accounts,  including,  among  other  things,  banlc  statements  that  list  account  balances.  The 
existence  of  these  records  in  Subject  Premises-l  will  be  relevant  to,  among  other  things,  Cohen’s 
ownership  of  the  accounts  and  his  knowledge  of  the  balances  in  these  accounts. 

e.  Additionally,  Cohen  may  have  records  of  other  bank  accounts  or  assets  friat  weie 
not  disclosed  to  Sterling  and  are  not  presently  laiown  by  law  enforcement.  For  example,  as 
described  above,  Cohen  has  received  interest  income  since  2015  that  he  has  not  disclosed  to 
Sterling  or  paid  taxes  on.  Also,  on  Cohen’s  August  2014  Financial  Statement,  supra  1 16(e), 
he  disclosed  $10,000,000  in  “investments  in  overseas  entities.”^°  The  value  of  these  mvestments 
was  omitted  from  subsequent  financial  statements.  However,  for  the  reasons  outlined  above,  there 
is  probable  cause  to  believe  that  Cohen  omitted  the  value  of  those  investments  from  his  2017 


30  Based  on  my  participation  in  an  interview  with  Sterling  Employee-3, 1  have  leai-ned  that 
Cohen  told  Sterling  Employee-3  that  the  reference  to  “investments  m  overseas  entities  on  is 
2014  Financial  StatLenLas  to  serve  merely  as  a  “placeholder”  for  potential  future  investments. 
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financial  statements  in  order  to  understate  his  assets.  As  Subject  Premises-1  is  Cohen’s  primary 
residence  and  he  uses  Subject  Premises-1  as  the  mailing  address  for  banlc  records,  there  is  probable 
cause  to  believe  that  account  statements  for  unlcnown  bank  accounts  or  assets  concealed  from 

Sterling  are  likely  to  be  found  in  Subject  Premises- 1. 

f.  Based  on  my  review  of  records  maintained  by  AT &T  and  produced  pursuant  to  the 

Cohen  Email  Warrants,  I  Imow  that  the  address  Cohen  provided  to  AT&T  for  Essential  Consultants 
is  the  addresk  for  Subject  Premises-T.  II  19  (c)^Therefore,i;here  is  probable  cause-to 

believe  that  Subject  Premises-1  will  contain  evidence  concerning  the  operation  of  Essential 
Consultants  or  money  that  Cohen  received,  thi'ough  Essential  Consultants,  from  AT&T. 
Additionally,  because  Cohen  used  the  address  for  Subject  Premises-1  for  at  least  one  consultmg 
arrangement  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  may  contain  records  of  other  consulting  arrangements  that  Cohen,  through  Essential 

Consultants,  has  with  other  individuals  or  entities. 

g.  Based  on  my  review  of  records  maintained  by  GetzeP  s  accounting  firm,  and  emails 

produced  pursuant  to  the  Cohen  Email  Warrants,  I  have  learned  that  GetzeP  s  accounting  firm  sent 
documents  to  Subject  Premises-1  and  used  the  address  for  Subject  Premises-1  as  the  address  listed 
on  Cohen’s  personal  and  corporate  tax  returns.  supra  1  16(n).  For  instance,  on  or  about 
October  6,  2017,  an  employee  at  GetzePs  accounting  firm  emailed  Cohen  that  she  had  sent 
Cohen’s  September  2017  Financial  Statement  by  FedEx  to  Cohen’s  attention.  Accordmgly, 

Cohen’s  tax  records  are  lilcely  to  be  found  in  Subject  Premises-1. 

h.  Based  on  my  review  of  banlc  records  and  publicly-available  documents,  I  know  that 
Cohen  used  $130,000  from  a  home  equity  line  of  credit  on  Subject  Premises-1  to  pay  Clifford.  I 
also  know  that  on  the  settlement  and  nondisclosure  agreement  between  “Peggy  Peterson”  and  “EC, 
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LLC,”  the  address  for  Essential  Consultants  is  Subject  Premises-1.  Accordingly,  Subject 
Premises-1  is  lilcely  to  contain  evidence  of  the  Campaign  Finance  Offenses,  including  settlement 
and  nondisclosure  agreements,  payment  records,  written  and  email  correspondence,  and  records 

pertaining  to  the  home  equity  line  of  credit. 

i.  Based  on  my  review  of  emails  produced  pui  suant  to  the  Cohen  Email  Warrants  and 

iCloud  Wan-ant,  I  know  that  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini,  and  a 

MacBook  Pro  to  accesiWiCi^c^STBasTd  Wmyreviewo 

Apple  pursuant  to  the  iCloud  Warrant,  I  Imow  that  electronic  devices  linlced  to  Cohen’s  iCloud 
account  were  used  at  Subject  Premises-1  to,  among  other  things,  place  telephone  calls  and  backup 
files  to  Cohen’s  iCloud  account.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  contains  electronic  devices,  including  certain  Apple  products,  that  for  reasons 

discussed  below  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

j .  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I 

understand  that  Subject  Premises-l  recently  sustained  water  damage  to  certain  parts  of  the 
premises,  and  that  Cohen  has  engaged  contractors  to  perform  certain  remediation  work  on  the 
premises,  hi  addition,  as  set  foifh  above,  I  believe  that  Cohen  and  his  family  are  temporarily 
residing  at  Subject  Premises-4  m  the  Loew’s  Regency  Hotel,  which  is  approximately  two  blocks 
horn  Subject  Premises-1.  However,  based  on  my  review  of  a  work  order  sent  to  Cohen’s  email 
by  a  contractor,  I  understand  that  the  first  phase  of  the  work  order  called  for  the  contractor  to  “Pack 
&  Remove  all  items  &  finmishings  in  Living  Room,  Kitchen,  Sons  Room  &  Dining  Room”  and 
store  them  off-site,  hi  addition,  based  on  my  review  of  drawings  sent  to  Cohen  by  the  contractor, 
it  appears  that  the  work  is  primarily  being  done  in  these  rooms.  Thus,  I  believe  that  the 
construction  -  to  the  extent  it  is  still  ongoing  -  would  not  necessarily  have  caused  Cohen  to  move 
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all  documents  or  evidence  responsive  to  the  warrant  out  of  Subject  Premises-1,  because  it  does  not 
appear  that  work  is  being  done  to  the  portion  of  Subject  Premises-1,  such  as  a  home  office  or 
Cohen’s  own  room,  where  such  documents  or  evidence  would  most  likely  be  found.^^ 

48.  Second,  there  is  probable  cause  to  believe  that  Cohen  uses  Subject  Premises-2  as 
office  space,  and  also  that  Subject  Premises-2  contains  certain  electronic  devices.  Specifically, 
fi-om  my  review  of  the  “strategic  alliance  agreement”  between  Squhe  Patton  Boggs  and  Cohen, 

"and  my  fevie^dffhe  press  release  W  Squif^PattorrBoggs’s  website;  Pknowfhat  Cohen  has  an- 

office  at  Subject  Premises-2.  See  supra  18(d),  19(e).  Indeed,  I  have  learned  that  pursuant  to 
Cohen’s  agreement  with  the  law  fii-m,  he  has  “dedicated  and  segregated  office  space”  in  Squire 
Patton  Boggs’s  offices  on  the  23rd  floor  of  30  Rockefeller  Plaza,  and  that  the  space  is  “physically 
separate”  from  the  firm’s  offices  and  has  “locked  doors  and  its  own  locked  file  cabinets.  See 
supra  f  19(e).  Additionally,  I  know  that  under  the  teims  of  the  agreement,  Cohen  agreed  to 
^^arrange  for  [his]  own  computer  server  system  that  is  not  connected  to  [Squire  Patton  Boggs  s] 
computer  network  system.”  I  know  from  my  participation  in  an  inteiview  with  Getzel,  who  met 
Cohen  at  Subject  Premises-2  in  2017,  that  Subject  Premises-2  is  an  office  with  a  door,  it  appears 
to  be  used  only  by  Cohen,  and  it  contains,  among  other  things,  a  computer  and  paper  files. 
According  to  Getzel,  when  Getzel  saw  Cohen  at  Subject  Premises-2,  he  had  two  cellular 
telephones  in  Subject  Premises-2.  I  also  laiow  from  my  review  of  emails  produced  pursuant  to  the 
Cohen  Email  Warrants  that  Cohen  uses  the  address  for  Subject  Premises-2  in  the  signature  block 

As  noted  below,  based  on  my  tiaining  and  experience,  I  believe  that  individuals  who  travel  or 
stay  in  hotels  for  short-term  periods  commonly  bring  some  items  with  them,  such  as  portable 
electronic  devices  or  sensitive  items,  meaning  that  Cohen  has  likely  taken  some  evidence  fi'om 
Subject  Premises-1  to  Subject  Premises-4.  Nevertheless,  given  the  temporary  natoe  of  Cohen’s 
stay  at  Subject  Premises-4  and  the  scope  of  the  work  being  done  at  Subject  Premises-1, 1  believe 
it  is  unlikely  that  Cohen  has  taken  all  evidence  that  would  be  subject  to  seizure  out  of  Subject 
Premises-1. 
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on  his  emails.  Based  on  my  review  of  notes  of  a  call  between  Cohen  and  First  Republic  Employee- 
2  (which  notes  were  taken  by  another  First  Republic  employee,  who  was  participating  in  the  call 
and  taking  notes),  I  Icnow  that,  on  or  about  November  15,  2017,  Cohen  told  First  Republic 
Employee-2  that  he  had  a  new  office  at  30  Rock.  Moreover,  I  Icnow  from  an  article  in  Vanity  Fair 
published  on  or  about  February  14,  2018,  that  Cohen  was  interviewed  by  the  magazine  in  Subject 
Premises-2  in  or  about  February  2018. 

- “^497 - There  is  also^trobable  cause  to  believe  that  SubjectrPremises-2  isiikely  to  contain 

instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  Icnow  the  following: 

a.  According  to  records  maintained  by  Sterling,  when  Cohen  was  emailing  with 
Sterling  Employee-3  in  2018  about  a  modification  to  his  existing  loan  from  Sterling,  Cohen  listed 
his  address  in  his  email  as  the  address  for  Subject  Premises-2.  See  supra  K  16(t),  16(u). 
Accordingly,  Subject  Premises-2  likely  contains  evidence  concerning  Cohen’s  loan  modification 
negotiations  with  Sterling. 

b.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  the  address  Cohen  provided  to  KAI  and  BTA  for  Essential  Consultants  is  the  address 
for  Subject  Pi-emises-2.  See  supra  19(a),  19(b).  Therefore,  there  is  probable  cause  fo  believe 
that  Subject  Premises-2  will  contain  evidence  concerning  the  operation  of  Essential  Consultants 
or  money  that  Cohen  received,  tlirough  Essential  Consultants,  from  KAI  and  BTA,  among  other 
entities  with  which  Cohen  had  a  consulting  arrangement.  Additionally,  based  on  my  review  of 
emails  sent  in  2018  that  were  obtained  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
continues  to  enter  into  consulting  airangements  through  Essential  Consultants,  and  agreements 
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relating  to  those  arrangements  indicate  that  Essential  Consultants  is  located  at  Subject  Premises- 
2.  Additionally,  because  Cohen  used  the  address  for  Subject  Premises-2  for  multiple  consulting 
an-angements  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-2  may  contain  records  of  other  unlcnown  consulting  arrangements  that  Cohen  has  with 

other  individuals  or  entities. 

c.  Based  on  my  review  of  records  maintained  by  Getzel’s  accounting  firm,  and  emails 
■^^^Suce^uant  to  lh^^^  as  weiramyTte-trapationrinr^ 

Getzel,  I  have  learned  that  Getzel  visited  Subject  Premises-2  to  meet  with  Cohen  about  his  taxes. 
See  supra  H  20(a).  At  that  meeting,  Getzel  discussed  with  Cohen  whether  Cohen  should  disclose 
Essential  Consultants  on  his  personal  financial  statement  to  banks.  According,  there  is  probable 
cause  to  believe  that  Subject  Premises-2  will  contain  evidence  relating  to  Cohen’s  taxes,  or  notes 
of  his  conversation  with  Getzel.  Moreover,  the  fact  that  Cohen  used  Subject  Premises-2  for  a 
meeting  regarding  his  personal  financial  matters  provides  probable  cause  to  believe  that  documents 

and  information  regarding  his  finances  will  be  found  in  Subject  Premises-2. 

d.  Based  on  my  participation  in  an  interview  with  Getzel,  I  know  that  Cohen  mamtams 
a  computer  in  Subject  Premises-2.  From  my  review  of  IP  data  produced  pursuant  to  a  subpoena 
and  pen  register  to  Google,  it  appeal's  that  Cohen  is  logging  into  his  Gmail  account  from  Subject 
Premises-2.  Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-2  contains 
electronic  devices,  that  for  reasons  discussed  below  are  likely  to  contain  evidence  of  the  Subject 

Offenses. 

e.  Based  upon  my  traming  and  experience,  I  have  learned  that  individuals  who 
maintain  businesses  typically  keep  records  relating  to  the  business-such  as  contracts  with  clients 
and  records  of  payments-at  the  business'  identified  location.  I  am  not  aware  of  any  addresses 
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associated  with  Essential  Consultants  other  than  Subject  Premises-1  and  Subject  Premises-2. 
Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-1  and  Subject  Premises-2 
will  contain  business  reeords  for  Essential  Consultants. 

50.  Third,  there  is  probable  cause  to  believe  that  Subj ect  Premises-3  is  likely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  In  particular; 

a.  As  noted  above,  Cohen  has  two  bank  accounts  at  TD  Bank.  In  or  about  November 
^17,  as  Cfrhen  waSeceivihg  substantffl  incomfrfrdirrcblti^lting  work— which  he  did  not  disclose 
to  Sterling — Cohen  opened  the  safety  deposit  box  at  TD  Banlc,  which  is  Subject  Premises-3.  In 
light  of  the  aforementioned  evidence  that  Cohen  conceals  assets,  including  assets  at  TD  Bank, 
there  is  probable  cause  to  believe  that  Subject  Premises-3  contains  financial  assets,  objects  of  value 
and/or  documents  relating  to  such  assets  or  objects  of  value  that  Cohen  likely  did  not  disclose  to 
Sterling.  Indeed,  based  on  my  tiaining  and  experience,  I  am  aware  that  people  often  conceal 
valuable  items  in  safety  deposit  boxes.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-3  will  contain  evidence  of  the  Bank  Fraud  Offenses. 

b.  In  addition,  based  on  my  review  of  records  produced  by  TD  Bank,  I  know  that 
Cohen  has  accessed  the  vault  in  which  Subject  Premises-3  is  stored  on  two  occasions.  The  first 
such  occasion  was  on  November  10,  2017.  Cohen  signed  into  the  vault  at  approximately  5:35  and 
out  of  vault  at  approximately  5:39  on  that  date.^^  Based  on  my  review  of  toll  lecords,  I  know  that 
Cohen’s  first  call  after  he  signed  out  of  the  safety  deposit  box  -  approximately  45  minutes  later - 
was  to  Keith  Davidson.  Specifically,  at  6:25  p.m.  Cohen  called  Davidson  and  they  spoke  for  less 
than  a  minute;  three  minutes  later,  Davidson  called  Cohen  back  and  they  spoke  for  approximately 


The  entry  in  the  bank’s  log  book  does  not  specify  whether  this  is  A.M.  or  P.M.  However,  I  infer 
that  it  is  P.M.,  because  it  is  unlikely  that  the  bank  would  have  been  open  at  5:35  and  5:39  a.m. 
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22  minutes.  The  second  such  occasion  was  on  Febraaiy  2,  2018,  which  is  during  the  time  period 
numerous  media  reports  about  Cohen’s  payment  to  Clifford  were  being  published,  and  is  one  day 
after  it  appears  that  Cohen’s  family  moved  into  Subject  Premises-4,  as  set  forth  above.  The  timing 
of  Cohen’s  two  visits  to  the  vault  -  one  shortly  before  a  call  to  Keith  Davidson  and  the  other  around 
the  time  that  Cohen  came  under  media  scrutiny  in  connection  with  the  payment  to  Davidson’s 
client  -  gives  rise  to  probable  cause  to  believe  that  Subject  Premises-3  will  contain  evidence  of  the 

Tlam^ign~Finance“Offenses7  mch  asndommmts^relevant  to  th^Cohen’s  dealing  with  Keiflr 

Davidson  and  the  payment  to  Clifford,  including  documents  or  evidence  that  Cohen  did  not  want 
to  leave  in  his  apartment  where  constniction  workers  would  be  present.^^ 

5 1 .  Based  on  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email  Warrants  and 
cell  phone  location  information,  I  believe  that  Cohen  is  temporarily  residing  in  Subject  Premises- 
4.  See  supra  3(d).  There  is  also  probable  cause  to  believe  that  Subject  Premises-4  contains 
instrumentalities  and  evidence  of  the  Subject  Offenses,  including,  the  following: 

a.  As  described  above,  it  appears  that  Cohen  moved  to  Subject  Premises-4  on  or  about 
February  1,  2018,  at  which  time  numerous  media  reports  about  Cohen’s  involvement  in  the 
payment  to  Clifford  were  being  published.  See  supra  3(d).  During  this  time  same  period, 
Cohen  was  frequently  conesponding  with  the  media  and  sent  himself  and  others  statements  about 
liis  involvement  in  the  payment  to  Clifford.  See  supra  42(a)-(c).  Thus,  there  is  probable  cause 
that  Cohen  took  at  least  some  documents  and  evidence  relating  to  the  Clifford  payment  with  him 
to  Subject  Premises-4,  in  order  to  reference  and  consult  them  in  connection  witli  these  statements. 


As  noted  above.  Subject  Premises-3  is  approximately  five  inches  by  ten  inches.  Accordingly,  I 
do  not  believe  that  it  would  fit  a  lai-ge  volume  of  hard  copy  documents;  however,  a  small  number 
of  hard-copy  documents,  or  a  large  volume  of  documents  contained  on  a  flash  drive  or  other 
portable  storage  device,  would  fit  m  Subject  Premises-3. 
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b.  As  described  above,  at  the  time  Cohen  moved  to  Subject  Premises-4,  he  was  also 
in  the  midst  of  ongoing  negotiations  with  Sterling  regarding  the  refinancing  of  his  medallion  debts. 
For  example,  on  January  30, 2018,  Cohen  had  a  lengthy  phone  call  with  Sterling  Employee-3  about 
his  finances  and  the  proposed  restructuring,  and  on  February  1,  2018,  Cohen  sent  an  email  to 
Sterling  Employee-3  claiming  that  he  did  not  have  more  than  $1.25  million  in  cash.  See  supra 
16(u).  Thus,  there  is  probable  cause  that  Cohen  took  at  least  some  documents  and  evidence  relating 
to  his  ongoing  negotiationswtirSterlihp^ith  him  fb^Su6jecfPremises^47in  order  to 

consult  them  in  connection  with  these  negotiations. 

c.  As  described  above,  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini, 
and  a  MacBook  Pro  to  access  his  iCloud  account,  and  these  electronic  devices  linlced  to  Cohen’s 
iCloud  account  were  used  at  Subject  Premises-1  -  Cohens’  permanent  residence  -  to  place 
telephone  calls  and  bacloip  files  to  Cohen’s  iCloud  account.  See  supra  47(i).  Although  Cohen’s 
stay  at  Subject  Premises-4  is  temporary,  based  on  my  training  and  experience  I  know  that 
individuals  who  travel  or  stay  in  hotels  for  short-term  periods  commonly  bring  portable  electronic 
devices  with  them,  such  as  cellular  phones,  tablets,  or  laptops.  Accordmgly,  there  is  probable 
cause  to  believe  that  Subject  Premises-4,  where  Cohen  currently  appears  to  be  residing,  contains 
electronic  devices,  including  Subject  Device-1,  Subject  Device-2,  and/or  certain  Apple  products, 
that  for  the  reasons  discussed  herein  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

d.  Moreover,  as  set  forth  above,  based  on  cellphone  location  information  I  know  that 
Subject  Device-1  and  Subject  Device-2  were  in  the  vicinity  of  Subject  Premises-4  as  recently  as 
this  morning  (April  8,  2018).  As  set  forth  above,  there  is  probable  cause  to  believe  that  Cohen 
used  the  Subject  Devices  in  furtherance  of  the  Subject  Offenses,  including  to  communicate  with 
Sterling  employees  regarding  the  medallion  transaction,  with  First  Republic  employees  regarding 
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the  Essential  Consultants  Account,  with  his  accountant  regarding  his  finances,  and  with 
individuals,  such  as  Davidson,  Howard  and  Pecker,  involved  in  the  $130,000  payment  to  Clifford. 

52.  Although  Cohen  appears  to  be  residing  currently  in  Subject  Premises-4,  it  is 
unknown  whether  Cohen  will  be  physically  present  within  Subject  Premises-4  at  the  moment  the 

warrantsoughthereinai-e  executed.  IfCohen  is  within  Subject  Premises-4  at  that  moment.  Subject 

Device-1  and  Subject  Device-2  -  his  cellphones  -  will  lilcely  also  be  within  Subject  Premises-4. 

Tcohenis^^^^dfiita^cm^ 

wherever  he  is  located  (which,  based  on  location  data  for  Subject  Device-1  and  Subject  Device-2 
as  recently  as  today,  is  likely  to  be  in  the  Southern  District  of  New  York).  As  such,  this  warrant 
seelcs  separate  authority  to  seize  Subject  Device-1  and  Subject  Device-2,  in  the  event  that  those 
devices  are  not  located  within  Subj ect  Premises-4  (or  another  Subj ect  Premises)  at  the  moment  the 

warrants  sought  herein  are  executed. 

D.  Probable  Cause  Justifying  Search  of  ESI 

53.  Based  on  the  foregoing,  there  is  probable  cause  to  believe  that  Subject  Premises-1, 

Subject  Premises-2  and  Subject  Premises-4  contain  electronic  devices  that  are  lUcely  to  contam 

evidence,  fi-uits,  and  instrumentalities  of  the  Subject  Offenses  (and,  as  set  forth  above,  that  Subject 

Device-1  and  Subject  Device-2  are  themselves  electronic  devices  that  are  likely  to  contam 

evidence  of  the  Subject  Offenses).  Specifically,  based  on  my  review  of  information  produced 

pursuant  to  the  Cohen  Email  Warrants,  the  iCloud  Warrant,  and  subpoenas,  as  well  as  pen  register 

data,  I  submit  that  there  is  probable  cause  that  Subject  Premises-1  contains  an  Apple  iPadMmi,  a 

MacBook  Pro,  and  has,  at  various  times,  contained  Apple  cellphones;  similarly,  there  is  probable 

cause  that  Subject  Premises-2  contains  a  computer  and  has,  at  various  times,  contamed  Apple 
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cellphones.  These  devices  are  likely  to  include  evidence,  fruits,  and  instrumentalities  of  the 
Subject  Offenses  for  the  following  reasons: 

a.  As  described  throughout  this  affidavit,  Cohen  used  email  to  send  and  receive 
communications  related  to  the  Subject  Offenses.  In  particular,  Cohen  used  email  to  send  and 
receive  communications  with  Sterling,  Fu  st  Republic,  Getzel,  the  entities  to  which  he  is  providing 
consulting  services,  Davidson,  and  Howard,  among  others.  While  some  of  these  emails  have 
already  been  obtained  vifr subpoenas  and  keaf  ch  warrants, Tlmow  from  my  training  and“expeiience 
that  individuals  can  and  do  delete  emails  from  their  Internet-based  inboxes  but  retain  copies  of 
those  emails  on  then  hard  drives.  I  also  know  that  individuals  often  have  multiple  email  accoimts, 
some  of  which  may  not  be  known  to  law  enforcement,  and  as  a  result  electronic  devices  can  be  a 
unique  repository  of  all  emails  relevant  to  certain  Subject  Offenses.  Indeed,  from  my  involvement 
in  this  investigation,  I  loiow  that  Cohen  had  an  email  account  with  the  Trump  Organization,  but 
the  USAO  and  FBI  have  not  been  able  to  obtain  the  contents  of  that  account  to  date.  Thus,  emails 
relevant  to  the  Subject  Offenses  are  lUcely  stored  on  electronic  devices  in  Subject  Premises-1, 
Subject  Premises-2  and/or  Subject  Premises-4. 

b.  Additionally,  Subject  Premises-1,  Subject  Premise-2  and  Subject  Premises-4  likely 
contain  electronic  copies  of  documents  relevant  to  the  Subject  Offenses.  Indeed,  I  know  from  my 
training  and  experience  that  individuals  often  retain  copies  of  important  documents  on  their 
computers  or  other  electronic  devices  capable  of  storing  information,  including  cellphones  (such 
as  the  Subject  Devices)  and  tablets.  Here,  there  are  a  number  of  documents  that  Cohen  has  likely 
retained  that  will  be  relevant  to  the  Subject  Offenses.  For  example,  elecfronic  devices  may  include 
documentation  of  Cohen’s  true  net  worth,  a  listing  of  his  assets,  an  accounting  of  his  available 
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cash,  consulting  agreements  with  third  parties,  and  documentation  of  his  payment  to  Clifford, 

among  other  evidence  of  the  Subject  Offenses. 

c.  Third,  I  laiow  from  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email 
Warrants  that  Cohen  sent  up  online  banking  with  First  Republic.  Based  on  my  training  and 
experience,  I  know  that  individuals  who  set  up  online  banking  often  receive  electronic  notices 
concerning  financial  transactions  and,  on  occasion,  save  records  of  thefr  financial  transactions  to 
thefr  devices.  Accor^gly^lhere  is  probable  cause  to  believe  that  Cohen’s  electronic  devices 
contain  evidence  of  banldng  activity,  including  the  existence  of  bank  accounts  or  assets  that  Cohen 
did  not  disclose  to  Sterling  or  Melrose. 

d.  Fourth,  from  my  review  of  records  produced  by  Apple,  I  know  that  Cohen 
communicates  usmg  text  message  as  well  as  encrypted  communications  applications.  These 
applications  that  Cohen  has  downloaded  onto  a  phone  include,  but  are  not  limited  to,  WhatsApp, 
Signal,  and  Dust.  1  know  from  my  review  of  toll  records  and  text  messages  that,  in  pmticular, 
Cohen  communicated  with  Pecker  using  these  encrypted  applications.  Accordingly,  there  is 
probable  cause  to  believe  that  Cohen’s  cellphones  -  the  Subject  Devices  -  will  contam  encrypted 
messages  that  are  not  otherwise  accessible  relating  to  the  Subject  Offenses. 

54.  Based  on  my  training  and  experience,  I  know  that  individuals  who  engage  in 
financial  crimes  commonly  use  computers  to  communicate  with  co-conspirators,  keep  financial 
ledgers,  and  retain  fraudulent  documents.  As  a  result,  they  often  store  data  on  their  computers 
related  to  their  illegal  activity,  which  can  include  logs  of  online  or  cellphone-based  chats  with 
co-conspirators;  email  correspondence;  contact  information  of  co-conspirators,  including 
telephone  numbers,  email  addresses,  and  identifiers  for  instant  messaging  and  social  medial 
accounts;  bank  account  numbers;  and/or  records  of  uses  of  funds. 


2017.08.02 


71 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  72  of  269 


55.  Based  on  my  training  and. experience,  I  also  know  that,  where  computers  are  used 
in  furtherance  of  criminal  activity,  evidence  of  the  criminal  activity  can  often  be  found  months  or 
even  years  after  it  occurred.  This  is  typically  true  because: 

•  Electronic  files  can  be  stored  on  a  hard  drive  for  years  at  little  or  no  cost  and  users  thus 
have  little  incentive  to  delete  data  that  may  be  useful  to  consult  in  the  future. 

»  Even  when  a  user  does  choose  to  delete  data,  the  data  can  often  be  recovered  months 
or  years  later  with  the  appropriate  forensic  tools.  When  a  file  is  “deleted”  on  a  home 

_ computer,  the  data  contained  in  the  file  does  not  actually  disappear,  but  instead  remains 

OT  the  hard  di'ive,  in  “slack  space,”  until  it  is  overwritten  by  new  data  that  cannot  be 

stored  elsewhere  on  the  computer.  Similarly,  files  that  have  been  viewed  on  the  Internet 
are  generally  downloaded  into  a  temporary  Internet  directory  or  “cache,”  which  is  only 
overwritten  as  the  “cache”  fills  up  and  is  replaced  with  more  recently  viewed  Internet 
pages.  Thus,  the  ability  to  retrieve  from  a  hard  drive  or  other  electronic  storage  media 
depends  less  on  when  the  file  was  created  or  viewed  than  on  a  particular  user’s 
operating  system,  storage  capacity,  and  computer  habits. 

•  In  the  event  that  a  user  changes  computers,  the  user  will  typically  transfer  files  from 
the  old  computer  to  the  new  computer,  so  as  not  to  lose  data.  In  addition,  users  often 
keep  backups  of  their  data  on  electronic  storage  media  such  as  thumb  drives,  flash 
memory  cards,  CD-ROMs,  or  portable  hard  drives. 

56.  Based  on  the  foregoing,  I  respectftilly  submit  there  is  probable  cause  to  beheve  that 
Cohen  engaged  in  the  Subject  Offenses,  and  that  evidence  of  this  criminal  activity  is  likely  to  be 
found  in  the  Subject  Premises,  on  computers  and  electronic  media  found  in  the  Subject  Premises, 
and  on  the  Subject  Devices.  In  particulai',  there  is  probable  cause  to  believe  that  the  Subject 
Premises  and  Subject  Devices  will  contain  evidence,  fruits,  and  instrumentalities  of  violations  of 
the  Subject  Offenses,  as  more  fully  described  in  Sectiop  II  of  Attachments  A,  B,  C,  D,  E  and  F  to 
the  proposed  warrants,  including  the  following: 

a.  Evidence  necessary  to  establish  the  occupancy  or  ownership  of  the  Subject 
Premises,  including  without  limitation,  utility  and  telephone  bills,  mail  envelopes,  addressed 
con* *espondence,  bank  statements,  identification  documents,  and  keys. 

b.  Evidence  relating  to  Sterling,  Melrose,  and/or  taxi  medallions. 
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c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  tansfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to^^^^^^^^^^nd/or  entities  associated  with  him. 

d.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Mehose. 

e.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

f.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

g.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annua!  income,  income  sour  ces,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  banlc  records. 

h.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 
Cohen  and^^^^^^^^^^and  any  payments  by^^^^|;o  Cohen. 

i.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  thefr 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

j.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 
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k.  Evidence  of  communications  involving  Michael  Cohen,  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howai'd  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

l.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

m.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  C^paigrT  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election, 

n.  Evidence  relating  to  any  reunbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

o.  Evidence  relating  to  Cohen’s  Icnowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

p.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 

relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

q.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  natui-e  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  pmpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution, 

r.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

III.  Procedures  for  Searching  ESI 
A.  Execution  of  Warrant  for  ESI 

57.  Federal  Rule  of  Criminal  Procedure  4 1  (e)(2)(B)  provides  that  a  wamant  to  search 

for  and  seize  property  “may  authorize  the  seizm'e  of  electronic  storage  media  or  the  seizure  or 
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copying  of  electronically  stored  information  ...  for  later  review.”  Consistent  with  Rule  41,  this  | 

application  requests  authorization  to  seize  any  computer  devices  and  storage  media  and  transport 
them  to  an  appropriate  law  enlbrcement  facility  for  review.  This  is  typically  necessary  for  a  number 

1^ 

of reasons;  | 

®  First,  the  volume  of  data  on  computer  devices  and  storage  media  is  often  impractical 
for  law  enforcement  personnel  to  review  in  its  entirety  at  the  search  location. 

@  Second,  because  computer  data  is  particularly  vulnerable  to  inadvertent  or  intenti  I 

modificatiorTor  destruction,  computeFd^ices  ai-e  ideallyfoxaminMln  a  coHttolled  j 

environment,  sueh  as  a  law  enforcement  laboratory,  where  trained  personnel,  using  i 

specialized  software,  can  malce  a  forensic  copy  of  the  storage  tnedia  that  can  be  j_ 

subsequently  reviewed  in  a  manner  that  does  not  change  the  underlying  data.  I 

®  Third,  there  are  so  many  types  of  computer  hardware  and  software  in  use  today  that  it  s 

can  be  impossible  to  bring  to  the  search  site  all  of  the  necessary  technical  manuals  and 
specialized  personnel  and  equipment  potentially  required  to  safely  access  the 
underlying  eomputer  data.  J 

•  Fourth,  many  faetors  can  complicate  and  prolong  recovery  of  data  fi-otn  a  computer  ; 

deviee,  ineluding  the  increasingly  common  use  of  passwords,  encr3q)tion,  or  other 
features  or  eonfigurations  designed  to  protect  or  conceal  data  on  the  computer,  which 
often  take  eonsiderable  time  and  resources  for  forensic  personnel  to  detect  and  resolve. 

58.  As  discussed  herein.  Squire  Patton  Boggs  is  a  fiinctioning  law  firm  that  conducts 
legitimate  business  unrelated  to  Cohen’s  commission  of  the  Subject  Offenses.  Subject  Premises-  t 

2  is  an  office  loeated  inside  of  Squire  Patton  Boggs’s  New  York  office.  In  order  to  execute  the 
warrant  in  the  most  reasonable  fashion,  law  enforcement  personnel  wiU  attempt  to  investigate  on 
the  scene  of  what  computers  or  storage  media,  if  any,  must  be  seized  or  copied,  and  what  computers 

or  storage  media  need  not  be  seized  or  copied.  Law  enforcement  personnel  will  speak  with  Squire 

Patton  Boggs  personnel  on  the  scene  as  may  be  appropriate  to  determine  which  files  and  electronic 
devices  within  Subjeet  Premises-2  belong  to  or  were  used  by  Cohen.  While,  based  on  the  j 

foregoing,  it  does  not  appear  that  Cohen  shared  electronic  devices  or  a  server  with  Squire  Patton  I 

Boggs,  where  appropriate,  law  enforcement  personnel  vdll  copy  data,  rather  than  physically  seize  | 
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computers,  to  reduce  the  extent  of  any  disruption  of  Squire  Patton  Boggs’s  operations.  If,  after 
inspecting  the  seized  computers  off-site,  it  is  determined  that  some  or  all  of  this  equipment  is  no 
longer  necessary  to  retrieve  and  preserve  the  evidence,  the  Government  will  return  it. 

59.  Additionally,  because  Cohen  is  an  attorney,  and  claims  to  serve  as  a  personal 
attorney  for  Trump,  the  review  of  evidence  seized  from  the  Subject  Premises  and  Subject  Devices 
will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law  enforcement 

in  amanner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable  privilege.  When 
appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate  and  apart  from 
tiie  investigative  team,  in  order  to  review  potentially  privileged  communications  and  determine 
which  communications  to  release  to  the  investigation  and  prosecution  team. 

B.  Accessing  ESI  on  the  Subject  Devices 

60.  As  described  above,  the  Subject  Devices  are  both  Apple  brand  devices. 

61.  I  know  ftom  my  training  and  experience,  as  well  as  from  information  foimd  m 
pnbBcly  available  materials  ineluding  those  pnbllshed  by  Apple,  that  some  models  of  Apple 
devices  such  as  iPhones  and  iPads  offer  their  users  the  ability  to  unlock  the  device  via  the  use  of  a 
fingerprint  or  thumbprint  (collectively,  “fingerprint”)  in  lieu  of  a  numeric  or  alphanumeric 
passcode  or  password.  This  feature  is  called  Touch  ID.  1  also  know  that  the  Apple  iPhone  X  offers 
its  users  the  ability  to  unlock  the  device  via  the  use  of  facial  recognition  (through  Inliared  and 
visible  light  scans)  in  lieu  of  a  numeric  or  alphanumeric  passcode  or  password.  This  feature  is 

called  Face  ID. 

62.  If  a  user  enables  Touch  ID  on  a  given  Apple  device,  he  or  she  can  register  up  to  5 
fingerprints  that  can  be  used  to  unlock  that  device.  The  user  can  then  use  any  of  the  registered 
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fingerprints  to  unlock  the  device  by  pressing  the  relevant  fmger(s)  to  the  device’s  Touch  ID  sensor, 
which  is  found  in  the  round  button  (often  refened  to  as  the  “home”  button)  found  at  the  bottom 
center  of  the  front  of  the  device.  If  a  user  enables  Face  ID  on  a  given  Apple  device,  he  or  she  can 
imlock  the  device  by  raising  the  iPhone  to  his  or  her  face,  or  tapping  the  screen.  In  my  training 
and  experience,  users  of  Apple  devices  that  offer  Touch  ID  or  Face  ID  often  enable  it  because  it  is 
considered  to  be  a  more  convenient  way  to  unlock  the  device  than  by  entering  a  numeric  or 
alphanumeric  passcode  or  password,  as  well  as  a  more  secure  way  to  protect  the  device’s  contents. 

63 .  In  some  circmnstances,  Touch  ID  or  Face  ID  cannot  be  used  to  unlock  a  device  that 
has  either  security  feature  enabled,  and  a  passcode  or  password  must  be  used  instead.  These 
circumstances  include:  (1)  when  the  device  has  just  been  turned  on  or  restarted;  (2)  when  more 
than  48  hours  has  passed  since  the  last  time  the  device  was  unlocked;  (3)  when  the  passcode  or 
password  has  not  been  entered  in  the  last  6  days,  and  the  device  has  not  been  unlocked  via  Touch 
ID  in  the  last  8  hours  or  the  device  has  not  been  unlocked  via  Face  ID  in  the  last  4  hours;  (4)  the 
device  has  received  a  remote  lock  command;  or  (5)  five  unsuccessful  attempts  to  unlock  the  device 
via  Touch  ID  or  Face  ID  are  made. 

64.  The  passcodes  or  passwords  that  would  unlock  the  Subject  Devices  are  not  Icnown 
to  law  enforcement.  Thus,  it  will  likely  be  necessaiy  to  press  the  fingers  of  the  user  of  the  Subject 
Devices  to  the  devices’  Touch  ID  sensor,  or  hold  the  Subject  Devices  in  fi'ont  of  the  user’s  face  to 
activate  the  Face  ID  sensor,  in  an  attempt  to  unlock  the  devices  for  the  purpose  of  executing  the 
search  authorized  by  this  warrant.  Attempting  to  unlock  the  relevant  Apple  devices  via  Touch  ID 
with  the  use  of  the  fingerprints  of  the  user,  or  via  Face  ID  by  holding  the  device  in  front  of  the 
user’s  face,  is  necessary  because  the  government  may  not  otherwise  be  able  to  access  the  data 
contained  on  those  devices  for  the  purpose  of  executing  the  search  authorized  by  this  warrant. 
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65.  Based  on  these  facts  and  my  training  and  experience,  it  is  likely  that  Cohen  is  the 
user  of  the  Subject  Devices,  and  thus  that  his  fingeiprints  are  among  those  that  are  able  to  unlock 
the  Subject  Devices  via  Touch  ID  or  his  face  is  able  to  unlock  the  Subject  Devices  via  Face  ID. 

66.  Although  I  do  not  loiow  which  of  a  given  user’s  10  fingerprints  is  capable  of 
unlocking  a  particular  device,  based  on  my  training  and  experience  I  know  that  it  is  common  for  a 
user  to  unlock  a  Touch  ID-enabled  Apple  device  via  the  fingerprints  on  thumbs  or  index  fingers. 
In  the  event  that  law  enfra^ einehf  isTmable  to  unlock  the  Subject  Devices  as  described  above 
within  the  five  attempts  permitted  by  Touch  ID,  this  will  simply  result  in  the  device  requiring  the 
entry  of  a  password  or  passcode  before  it  can  be  unlocked. 

67.  I  also  know  from  my  training  and  experience,  and  my  review  of  publicly  available 
materials  published  by  Apple  that  Apple  brand  devices,  such  as  the  Subject  Devices,  have  a  feature 
that  allows  a  user  to  erase  the  contents  of  the  device  remotely.  By  logging  into  the  Internet,  the 
user  or  any  other  indiAudual  who  possesses  the  user’s  account  information  can  take  steps  to 
completely  wipe  the  contents  of  the  device,  thereby  destroying  evidence  of  criminal  conduct,  along 
with  any  other  information  on  the  device.  The  only  means  to  prevent  this  action  is  to  disable  the 
device’s  ability  to  connect  to  the  Internet  immediately  upon  seizure,  which  requires  either  access 
to  the  device  itself  to  alter  the  settings,  or  the  use  of  specialized  equipment  that  is  not  consistently 
available  to  law  enforcement  agents  at  every  arrest. 

68.  Due  to  the  foregoing,  I  request  that  the  Court  authorize  law  enforcement  to  press 
the  fingers  (including  thumbs)  of  Cohen  to  the  Touch  ID  sensors  the  Subject  Devices,  or  hold  the 
Subject  Devices  in  front  of  Cohen’s  face,  for  the  purpose  of  attempting  to  unlock  the  Subject 
Devices  via  Touch  ID  or  Face  ID  in  order  to  search  the  contents  as  authorized  by  this  warrant. 


2017.08.02 


78 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  79  of  269 


C.  Review  of  ESI 

69.  FolloAving  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation 

of  forensic  image  copies,  law  enforcement  personnel  (including,  in  addition  to  law  enforcement 
officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and 
related  proceedings,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel 
assisting  the  government  in  this  investigation,  and  outside  technical  experts  under  government 
^nffol)^iil^eview“the  ESIli6ntained  tKefeiirfor“infortmtion  responsive  to  the  wWmlt7  ^ 

70.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques 
to  determine  which  files  or  other  ESI  contain  evidence  or  fruits  of  the  Subject  Offenses.  Such 
techniques  may  include,  for  example: 

•  surveying  directories  or  folders  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

»  conducting  a  file-by-file  review  by  “opening”  or  reading  the  first  few  “pages”  of  such 
files  in  order  to  determine  their  precise  contents  (analogous  to  performing  a  cursory 
examination  of  each  document  in  a  file  cabinet  to  determine  its  relevance); 

•  “scanning”  storage  areas  to  discover  and  possibly  recover  recently  deleted  data  or 
deliberately  hidden  files;  and 

•  performing  electronic  keyword  searches  through  all  electronic  storage  areas  to 
determine  the  existence  and  location  of  data  potentially  related  to  the  subject  matter  of 
the  investigation^'^;  and 

«  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


Keyword  searches  alone  are  typically  inadequate  to  detect  all  relevant  data.  For  one  thing, 
keyword  searches  work  only  for  text  data,  yet  many  types  of  files,  such  as  images  and  videos,  do 
not  store  data  as  searchable  text.  Moreover,  even  as  to  text  data,  there  may  be  information  properly 
subject  to  seizure  but  that  is  not  captured  by  a  keyword  search  because  the  information  does  not 
contain  the  keywords  being  searched. 
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71.  Law  enforcement  personnel  will  make  reasonable  efforts  to  restrict  their  search  to 
data  falling  within  the  categories  of  evidence  specified  in  the  warrant.  Depending  on  the 
circumstances,  however,  law  enforcement  personnel  may  need  to  conduct  a  complete  review  of  all 
the  ESI  from  seized  devices  or  storage  media  to  evaluate  its  contents  and  to  locate  all  data 

responsive  to  the  warrant. 

D.  Return  of  ESI 

ll.  IftteGOTmnnmtdSerTnin^^ 

to  retrieve  and  preserve  the  data,  and  the  devices  themselves  are  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  these  items,  upon  request. 
Computer  data  that  is  encrypted  or  um-eadable  will  not  be  returned  unless  law  enforcement 
personnel  have  determined  that  the  data  is  not  (i)  an  instrumentality  of  the  offense,  (ii)  a  fruit  of 
the  criminal  activity,  (iii)  contraband,  (iv)  othemise  unlawfiilly  possessed,  or  (v)  evidence  of  the 

Subject  Offenses. 
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IV.  Conclusion  and  Ancillary  Provisions 

73.  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachments  A,  B,  C,  D,  E  and  F  to  tltis  affidavit  and  to  the 
Search  and  Seizui-e  Warrants. 

74.  In  light  of  the  eonfldential  nature  of  the  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 

Court  orders  otherwise. 


/ 


Special  Agent 
FBI 


Sworn  to  before  me  on  :y  .  -rfi  ,  a  rn  p 
8th  day  of  April.  2018  /7/  /  tS  •  -2 


1 M  /  r 


B.  PITPAII 
uterED  §f ATBS  JUDGE 


All 
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ATTACHMENT  A 

I,  Premises  to  be  Searched — Subject  Premises-! 

The  premises  to  be  searched  (“Subject  Premises-l”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein. 

Apartment  Hlocated  inside  the  building  at  502  Park  Avenue,  New  York,  New  York 
10022.  The  building  located  at  502  Park  Avenue  is  a  32-floor  brick  residential  building.  Subject 
Premises-l  is  located  on  the  the  building. 


n.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  fi-om  Subject  Premises-l  ai'e  evidence,  fiiiits,  and  insflumentalities 
of  violations  of  18  U.S.C.  §§  371  (consphacy,  as  it  pertains  to  the  other  Subject  Offenses)  1005 
(false  bank  entiies),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 


a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  fiom  Januaiy  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agi'eement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  ^^^^^^^^md/or  entities  associated  with  hun. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  pmpose  of  payments  made  to  or  from  Essential  Consultants  or  the  natm-e 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalent^ 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  throug 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  , 
2013  to  the  present. 


g.  Evidence  relating  to  agieements,  loans,  and/or  financial  transaction^e^^e^ 
Cohen  controlled  by  the^^^^H^I 
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and  any  payments  by  January 

1,  2012  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephame  Clifford  or  Karen  McDougal. 

i  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 

David  Pecfc"dhd75r  DyErHdWd^bW  Donald  Trmnprthe-Trump  Campaiffl^^^^ 

Clifford,  and/or  Kai-en  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  *e 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Dump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  c^paign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 


o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p  Communications,  records,  documents,  and  other  files  reflectmg  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  m  to 

that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  ^t  ^ 

financial  institution;  the  source  of  fimds  flowing  into  an  account;  or  the 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 


q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 


B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-1  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categones 
set  forth  in  Section  n.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pio 
any  other  deslctop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-1  also  include; 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similai-  mformation. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 

concerning  the  configuration  of  the  seized  or-Gopiefrcomputeivdevices_oi^storage„media. - - 

3  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 


C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  m  additiM  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  ai  e  authorized  to  review  the  ESI  contained  therein  for  information  responsive 

to  the  wan'ant. 


In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  foi  example. 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  openmg  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

8  scanning  storage  ai-eas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

®  performing  key  word  searches  thi'ough  all  electronic  storage  areas  to  determine  whether 
occuiTences  of  language  contained  in  such  storage  ai'eas  exist  that  ai'e  mtimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  infoimation  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
n.A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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ATTACHMENT  B 


I.  Premises  to  be  Searched — Subject  Premises-2 


1  u  A  ('“CnViippf  Premises-2”t  are  described  as  follows,  and  include 

The  premises  to  be  searched  (  Subject  Premises  z  j  aic 

electronic  devices,  and  all  locked  and  closed  contamers  found  therem. 
that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller  Plaza. 


II.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  iteiTB  to  be  seized  from  Subject  Premises-2  are 

of  yioWtons  “f,**  statemeL  to'^  financial  institution),  1343  (wire  fraud),  and  1344 

"«d  52  uic  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (Illegal  eampatgn 
OTtiibutlons)  (the  “Subject  Offenses")  described  as  follows: 

a.  Evidence  relating  to  Sterling  Nationai  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1 , 20 1 3  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  or 

enfrties  associated  with  hta  to  4th  him. 

liabilities,  to  others,  including  to 

0.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates, 

•  1  1  +/X  PriVipn’c:  net  wolth  available  cash  and  cash  equivalents, 

i""p”M  -"omTS  JLua^l 

2013  to  the  present. 

„  Evidence  relating  to  agreements,  loans,  and/or  fmaneial  t|j|g|j|bg^ 
.■■■^^^^^^^^^^^■and/or  entities  controlled  by 

Cohen 
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and  any  payments  Cohen,  from  Januaiy 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Kai'en  McDougal. 

_ j  Kvidp:Tir,R  of  pnmmnnications  between  Michael  Cohen  and  American  Media,  Inc., 

David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  otW  potential  sources  of  negative 
publicity  involving  Tmmp’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-2  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  11. A  of  this  Attachment  above,  including,  but  not  limited  to,  any  desktop  and 
laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone  belonging  to  Michael  Cohen 


1, 2012  to  the  present. 
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or  in  his  possession,  portable  hard  drives,  disk  diives,  thumb  drives,  and  personal  digital  assistants. 
In  lieu  of  seizing  any  such  computer  devices  or  storage  media,  this  warrant  also  authorizes  the 
copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-2  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  ^y  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  softwai'e  manuals  or  other  ^mformation 

“^on^ing  the  cdKfiguratiMrbffhe  seized  m^'opM  computer  devices  or  stora 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 


C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  m  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  mformation  responsive 

to  the  waiTant. 


In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  waivant,  including,  for  example: 


•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  atthe  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

»  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determme 
their  precise  contents; 

®  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

»  performing  key  word  searches  thi'ough  all  electronic  storage  areas  to  determine  whethei 
occmvences  of  language  contained  in  such  storage  areas  exist  that  are  intunately  related 
to  the  subject  matter  of  the  investigation;  and 

*  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  malce  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
n.A  and  II-B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  fiom  seized  devices  or  storage  media  if  neeessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  waiTant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  eondueted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  proeedures  shall  inelude 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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ATTACHMENT  C 


I,  Premises  to  be  Searched — Subject  Premises-S 

The  premises  to  be  searched  (“Subject  Premises-3”)  are  described  as  follows,  and  include 
all  locked  and  closed  containers  found  therein: 

A  safe  deposit  box  located  inside  tMp  Bank  branch  location  at  500  Park  Avenue,  New 
York,  New  York  10019,  marked  as  box  The  safe  deposit  box  is  in  the  name  of  Michael 

Cohen  and  Laura  Cohen. 


n.  Items  to  Be  Seized _ _ _ _ _ _ _ _ _ _ . 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 


The  items  to  be  seized  from  Subject  Premises-3  are  evidence,  fraits,  ^d  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses)  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wne  fraud),  and  1344 
(banlc  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows. 


1  Evidence  relating  to  Michael  Cohen’s  net  worth,  available  cash  and  cash 
equivalents,  assets,  montlily  and  annual  income,  and  income  sources,  fi-om  January  1, 2013  to  the 
present. 

2.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  then- 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

3.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Tmmp  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

4  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephame 
Clifford,  and/or  Karen  McDougal. 


5.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 


6  Evidence  of  communications  with  Donald  Tmmp  and/or  agents  or  associates  of  the 
Tmmp  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

7.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 
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8.  Evidence  relating  to  Cohen’s  Icnowledge  of  the  c^paign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

9.  Any  portable  elecbonic  storage  device. 

B.  Search  of  Seized  Electronic  Devices 

Probable  cause  exists  to  search  any  seized  elecbonic  storage  device  for  the  items  set 


forth  in  Section  II(A)(l)-(8),  above. 


C,  Review  of  ESI 


Following  seizure  of  any  electronic  storage  device,  law  enforcement  personnel  (which  may 
include  in  addition  to  law  enforcement  officers  and  agents,  attorneys  for  the  government,  attorney 
support  staff,  agency  personnel  assisting  the  government  in  this  mvestigation,  ^d  ou  si  e 
teckiical  experts  under  government  control)  are  authorized  to  review  the  ESI  contained  therem  for 
information  responsive  to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example. 


«  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looldng  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 


.  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

*  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 


•  performing  key  word  searches  through  all  electronic  storage  areas  to  determme  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  mtimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  m  Sectmns 
11 A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authoiized  to  eonduc 
a  complete  review  of  all  the  ESI  from  seized  devices  if  necessary  to  evaluate  its  contents  and  to 
loeate  all  data  responsive  to  the  warrant. 


Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
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any  attorney-client  oi’  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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ATTACHMENT  D 

L  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein. 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  17th  floor  of  the  hotel. 

n.  Items  to  Be  Seized _ _  _ _ _ _ ^ 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fi-uits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows; 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Ewdence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  trans^^nWnto^in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to^^^^^^^^nd/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nafru'e 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  docmnents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  Associates. 

f  Ewdence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transaction^etw^ 
Cohen  controlled  by 
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land  any  payments  by  I 


|to  Cohen,  from  January 


1, 2012  to  the  present. 

h  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  an^or 
agents  or  associates  of  the  Tramp  Campaign  about  Stephanie  Clifford  or  Karen  MoDongal,  or 

payments  to  Stephanie  Clifford  or  Karen  McDougal. 

Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 


_ _ ^1  e.vi pence  ux  L-umiiiunit.-cmwiac  - - —  _ _ _ _ „  _ _ 

David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 

Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communieations  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  eonnection  with  the  eleetion. 

n.  Evidence  relating  to  Cohen’s  Icnowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requfrements,  and  campaign  confribution  hmits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  an^or  other  accomtante, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p  Communications,  records,  documents,  and  other  files  reflectmg  false 
representations  to  a  fmancial  institution  related  to  the  intended 

that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 

Lncial  institution;  the  source  of  flmds  flowing  mto  an  account;  or  the 

financial  fransactions  involving  that  fmancial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  he  seized  from  Subject  Pi-emises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  fallmg  within  the  ^ategones 
set  forth  in  Section  n.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  , 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  enciyption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other ^mformation 
concerning  the  configuration  of  the  seized  of  copied  computer  devices  or  storage  media. 

3.  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C,  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  ftierein  for  information  responsive 
to  the  warrant. 


In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  wairant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looldng  at  the  outside  of  a  file  cabinet  for  the  maikings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

®  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  deteiTnine 
their  precise  contents; 

®  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

e  performing  key  word  searches  thi-ough  all  electronic  storage  areas  to  determine  whether 
oceurrenees  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

»  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
n,A  and  n.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  fi-om  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  wanunt. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attomey-chent  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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ATTACHMENT  E 


I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-1 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-1”)  is 
described  as  follows: 

An  Apple  iPhone  sei-viced  by  AT&T  with  the  telephone  number 

During  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  autliorized  to 
depress  the  fingerprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Device-1,  or  hold  Subject  Device-1  in  fiont  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  tbfhe  contents  of  any^uclrdevice“as^thbrizM  by  this  waiTanC 


n.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device-1  for  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fi-aud),  and  1344  (bank 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 


a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to  I 


land/or  entities  associated  witli  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  or 
communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  natm  e  and  purpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  Januaiy  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  tm^c^^^^^w^^^ 

Cohen  entitiesconfrolledby 

and  any  payments  by  Cohen,  from  January 

1,  2012  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 

agents  or4egahrepresentatives,Jncludingjny.nQndisclosure  Mrgemgntejnd  related  documents, 

and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Tmmp  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  fric., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Tmmp  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tmmp’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  Icnowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Commimications  with  others,  including  Jeffrey  Getzel  and/or  other  accountante, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p.  Commimications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device- 1  is  no  longer  necessa^  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-1  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Q-iminal  Procedure  41(c),  the  Government  will  return  Subject  Device-1,  upon 

request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  m  order  to  address 

potential  privileges. 
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ATTACHMENT  F 


L  Device  Subject  to  Search  and  Seizure  -  Subject  Device-2 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-2”)  is 
described  as  follows: 


An  Apple  iPhone 


serviced  by  AT&T  with  the  telephone  number 


Duiing  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingerprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
^vice-2,  or  hold  Subject  Device-2  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  to  the  contents  of  any  such  device  as  authorized  bjMtKis  ‘warrant. 


n.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  persoimel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device-2  for  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (banlc 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  trmi^N^i^nto^  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  ^^^^^^^^Jand/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  or 
communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  soui'ces,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  banlc  records,  from  Januaiy  1, 
2013  to  the  present. 


Cohen  and 


^^Evidenc^relatin^^aereen^ts,  loans,  and/or  financial  tonsactimi^be^e^ 


|and/or  entities  controlled  by| 
land  any  payments  by  Cohen,  from  January 


1,  /ui/  TO  me  presem. 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 

agents  or  legahrepresentatives,  including- any_nondisclosure  agreements_and_related  documaits,. 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Tmmp  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  fric., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 


k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 


l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Tramp  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  accoimt  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 
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If  fce  Goveniment  detomines  that  Su^e^t  De«c^-2 

rf  »  "e  41(c).  thi  Gove,™t  will  temm  Subject  Device-2,  upon 

request. 

potential  privileges. 
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AO  106  (Rev.  06/09)  Application  for  a  Search  Warrant  

United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the.  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Four  Premises  and  Two  Electronic  Devices,  See 
Attached  Affidavit  and  Riders 


Case  No. 


APPLICATION  FOR  A  SEARCH  WARRANT 

I  a  federal  law  enforcement  officer  or  an  attorney  for  the  government,  request  a  search  warrant  and  state  under 
penalty  of  perjury  that  1  have  reason  to  believe  that  on  the  following  person  or  property  (identify  the  person  or  describe  the 

^m7tefses  anlfl^^^  See  Attached  Affidavit  and  Riders 


located  in  the 


Southern 


District  of 


New  York 


,  there  is  now  concealed  (identify  the 


person  or  describe  the  property  to  he  seized)'. 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDERS. 


The  basis  for  the  search  under  Fed.  R.  Crim.  P.  4 1  (c)  is  (check  one  or  more)'. 
sf  evidence  of  a  crime; 

sf  contraband,  fruits  of  crime,  or  other  items  illegally  possessed; 
sT property  designed  for  use,  intended  for  use,  or  used  in  committing  a  crime; 

□  a  person  to  be  arrested  or  a  person  who  is  unlawfully  restrained. 

The  search  is  related  to  a  violation  of: 

Code  Section  Offense  Description 

18  U.S.C.  s  371, 1005,  1014,  Conspiracy,  false  bank  entries,  false  statements  to  a  financial  institution, 

1343  and  1344,  and  wire  fraud,  bank  fraud,  and 

52  use  30116  and  30109  illegal  campaign  contributions 

The  application  is  based  on  these  facts: 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 


sT  Continued  on  the  attached  sheet. 

n  Delayed  notice  of  days  (give  exact  ending  date  if  more  than  30  days.  _ 

under  1 8  U.S.C.  §  3103a,  the  basis  of  which  is  set  forth  on  the  attached  sheet. 


)  is  requested 


Printed  name  and  title 


Sworn  to  before  me  and  signed  in  my  presence. 


Date:  04/08/2018 

City  and  state: 


7  A 

Ji\dge  *s  signature 

Hon.  Henry  B.  Pitman,  U.S.  Magistrate  Judge 


Printed  name  and  title 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  of  America  for  a  Search  and  Seizure 
Warrant  for  the  Premises  Known  and  Described 
as  (1)  502  Park  Avenue, 

York,  New  York  10022,  (2)  Michael  Cohen’s 
Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New 
ll^’-k,  New  York  101 12,  (3)  Safe  Deposit  Box  # 
^(Located  at  the  TD  Bank  Branch  at  500  Park 
Avenue,  New  York,  New  York  10019,  and  (4) 

TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 

Application  for  Search  and  Seizure 

Warrant 

Loews  Regency  Hotel,  540  Park  Avenue,  Room 
1728,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein,  and 
the  Electronic  Devices  Known  and  Described  as 

iPhone  with  Phone  Number 
^Hl^land  (2)  an  Apple  iPhone  with  Phone 

Reference  No.  2018R00127 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 

Special  Agent,  Federal  Bureau  of  Investigation,  being  duly  sworn, 

deposes  and  says: 

I.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  mcludmg  those 
involving  electronic  evidence. 

2.  I  make  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 
Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  premises  specified  below  (the  “Subject 
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Premises”)  and  the  electronic  devices  specified  below  (the  “Subject  Devices  )  for,  and  to  seize, 
the  items  and  information  described  in  Attachments  A,  B,  C,  D,  E  and  F.  This  affidavit  is  based 
upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enforcement  personnel;  and  my  training,  experience  and  advice  received  concerning  the 
use  of  electronic  devices  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored 
information  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of 
establishing  probable  cause,Tt  dbes  not  includeTrad^fdcfsThaf  nidw  Ibamedliufing^^ 
of  my  investigation.  Where  the  contents  of  documents  and  the  actions,  statements,  and 
conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in  part,  except  where 
otherwise  indicated. 

B.  The  Subject  Premises  and  Subject  Devices 

3.  Subject  Premises-1 ,  Subject  Premises-2,  Subject  Premises-3  and  Subject  Premises- 

4  (collectively,  the  “Subject  Premises”)  are  particularly  described  as: 

a.  Subject  Premises-1  is  Apartment  ^^^located  inside  the  building  at  502 
Park  Avenue,  New  York,  New  York  10022.  The  building  located  at  502  Park  Avenue  is  a  32- 
floor  brick  residential  building.  Subject  Premises-1  is  located  on  the^^|floor  of  the  building. 
Based  on  my  review  of  New  York  City  property  records,  I  have  learned  that  Michael  Cohen  and 
Laura  Cohen  own  Subject  Premises-1.^  Additionally,  as  described  below.  Subject  Premises-1  is 
Cohen’s  full-time  residence. 

b.  Subject  Premises-2  is  an  office  located  on  the  23rd  floor  of  the  building  at 
30  Rockefeller  Plaza,  New  York,  New  York  101 12.  The  building  located  at  30  Rockefeller  Plaza 


1  As  noted  infra,  I  have  learned  that  on  or  about  October  28,  2015,  Cohen  transferred  Subject 
Premises-1  into  a  trust. 
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is  a  66-floor  office  building  that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller 
Plaza.  Subject  Premises-2  is  located  on  the  23rd  floor  of  the  building  inside  of  the  offices  of  the 
law  firm  Squire  Patton  Boggs.  The  office  is  assigned  to  Michael  Cohen.  As  described  below, 
Michael  Cohen  works  and  conducts  meetings  at  Subject  Premises-2. 

c.  Subject  Premises-3  is  a  safety  deposit  box  located  inside  the  TD  Bank 

branch  location  at  500  Park  Avenue,  New  York,  New  York  10019.  Based  on  my  review  of  records 
TTiaintainedl^TD  BanOhave  learned  fh^thTsaf^depdsitbbYis¥ppdx  inclres  by- 

ten  inches  in  size,  and  is  marked  as  box^|  The  safety  deposit  box  is  in  the  name  of  Michael 
Cohen  and  Laura  Cohen. 

d.  Subject  Premises-4  is  Room  1 728  located  inside  the  Loews  Regency  Hotel 
at  540  Park  Avenue,  New  York,  New  York  10065.  The  building  is  a  luxury  hotel  located  on  Park 
Avenue  and  61st  Street.  Subject  Premises-4  is  located  on  the  17th  floor  of  the  hotel.  Based  on  my 
review  of  emails  obtained  pursuant  to  search  warrants  described  below,  I  have  learned  that  on  or 
about  January  5,  2018,  Cohen  received  an  email  from  an  employee  of  Loews  Regency,  which 
included  a  price  quote  for  a  long-term  stay  suite  based  on  a  three-month  stay  from  January  8  to 
April  8, 20 1 8.2  On  or  about  January  29, 20 1 8,  Cohen  sent  an  email  to  a  Loews  Regency  employee, 
stating,  in  pertinent  part:  “I  just  spoke  to  my  wife  and  she  has  scheduled  the  move  for  Thursday. 
Please  mark  down  that  we  will  be  taking  possession  on  Thursday,  February  1st.  Based  on  my 
review  of  cell  phone  location  data,  I  have  learned  that,  over  the  past  24  hours,  two  cellular  phones 
used  by  Cohen  have  been  located  in  the  vicinity  of  Subject  Premises-4.  In  particular,  on  or  about 


2  Although  the  quoted  price  contemplated  a  three-month  stay  from  Januaiy  8  to  Aprd  8,  it  appears 
that  Cohen  did  not  move  in  until  February  1,  and  as  of  today,  April  8,  cellphone  location 
information  demonstrates  that  Cohen’s  cellular  phones  are  in  still  in  the  vicinity  of  Subject 
Premises-4. 
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April  8,  2018,  law  enforcement  agents  using  a  “triggerfish”  device  identified  Room  1728  as  the 
room  within  the  hotel  in  which  the  Subject  Devices  are  most  likely  present^ 

e.  Therefore,  I  believe  that  Cohen  is  temporarily  residing  in  Subject 


Premises-4. 

4.  Subject  Device-1  and  Subject  Device-2  (collectively,  the  “Subject  Devices”)  are 


particularly  described  as: 

a.  Subject  Device-TTs  an  Apple  iPhbhe“  serviced  byA^T&T  witRthe^telephone  nuraber 
Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 
Device-1  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 


maintained  by  AT&T,  I  have  learned  that  Subject  Device-1  is  presently  located  m  the  Southern 


District  of  New  York. 

b.  Subject  Device-2  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 

Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 
Device-2  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-2  is  presently  located  m  the  Southern 

District  of  New  York. 

c.  Based  on  my  training,  experience,  and  research,  and  from  consulting  the 
manufacturer’s  and  service  providers’  advertisements  and  product  technical  specifications 
available  online,  I  know  that  the  Subject  Devices  have  capabilities  that  allow  them  to,  among  other 
things:  make  and  receive  telephone  calls;  save  and  store  contact  information;  send  and  receive 


^  Based  on  my  conversations  with  these  agents,  I  understand  that  it  is  also  possible  that  the  Subject 
Devices  are  one  floor  below,  in  Room  1628.  However,  as  noted,  I  understand  that  Cohen  received 
a  price  quote  for  a  long-term  stay  suite  and  is  residing  there  with  his  family.  Based  on  my 
conversations  with  FBI  agents  conducting  surveillance,  I  understand  that  Room  1728  appears  to 
be  a  suite,  whereas  Room  1628  appears  to  be  a  standard  room. 
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emails  and  text  messages;  download  and  run  mobile  telephone  applications,  including  encrypted 
call  and  messaging  application  such  as  WhatsApp,  Signal,  and  Dust;  take,  send,  and  receive 
pictures  and  videos;  save  and  store  notes  and  passwords;  and  store  documents. 

C.  The  Subject  Offenses 

5.  For  the  reasons  detailed  below,  I  believe  that  there  is  probable  cause  to  believe  that 
the  Subject  Premises  and  Subject  Devices  contain  evidence,  fruits,  and  instrumentalities  of 

violations  of  18  IJ.S.C.  §§  lOOS^/false^bahk  enfries)7"r014  (false  statementsAo  a  fmanciaP- 

institution),  1343  (wire  fraud),  and  1344  (bank  fraud)  (collectively,  the  “Bank  Fraud  Offenses”), 
52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the 
“Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  Other- 
Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

D.  Prior  Applications 

6.  The  FBI  and  the  United  States  Attorney’s  Office  for  the  Southern  District  of  New 
York  (“USAO”)  have  been  investigating  several  courses  of  criminal  conduct  by  Michael  Cohen. 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

7.  In  cormection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  wamants  for  emails  and 
other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 
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a.  On  or  about  July  1 8, 20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  account  j^^^J^gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received 
between  January  1, 2016  and  July  18, 2017  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant 
for  content  stored  in  the  iCloud  account  associated  with  Apple  ID  ^^^^^|@gmail.com  (the 
“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

~On  or  about  Novemb^j;  ‘20T77 WFm  '^ht^^ 
warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 

November  13, 2017  (the  “Second  Cohen  Gmail  Warrant  ). 

d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 

warrant  for  emails  in  the  account 
received  between  the  opening  of  the  Cohen  MDCPC  Account^  and  November  13, 2017  (the  “First 

Cohen  MDCPC  Warrant”). 

8.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBI’s  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  First  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  Warrant.  On  or  about  March  7,  2018,  the  SCO  provided  the  USAO 


4  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  t  e 
wanunt. 


(the  “Cohen  MDCPC  Account”)- sent  or 
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with  all  non-privileged  content  obtained  piarsuant  to  the  Cohen  iCloud  Warrant.^  A  filter  team 
working  with  the  SCO  had  previously  reviewed  the  eontent  produced  pursuant  to  these  warrants 

for  privilege. 

9.  On  or  about  February  28, 2018,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  the  Cohen  Gmail  Account  and  the  Cohen  MDCPC  Account,  among  other  accounts,  sent 
or  received  betweenNovember  14,2017  and  February  28, 2018  (the  “Third  Cohen  Gmail  Warrant” 
and  the  “^cond  Cohen  MDCPC  WarrEEt”)".  'The  content  produced  pursuant  to”these  warrants  is“ 
subject  to  an  ongoing  review  for  privilege  by  an  SDNY  filter  team.^ 

10.  The  emails  search  warrants  described  above  are  referred  to  collectively  as  the 

“Cohen  Email  Warrants.” 

11.  On  or  about  April  7,  20 1 8,  the  USAO  and  FBI  sought  and  obtained  a  warrant  for 
prospective  and  historical  cellphone  location  information  for  Subject  Device-1  and  Subject 
Device-2.  On  or  about  April  8, 2018,  the  USAO  and  FBI  sought  and  obtained  authority  to  employ 
an  electronic  technique,  commonly  known  as  a  “triggerfish,”  to  determine  the  location  of  Subject 
Device- 1  and  Subject  Device-2. 

II.  Probable  Cause 
A.  Overview 

12.  The  United  States  Attorney’ s  Office  for  the  Southern  District  of  New  York  and  FBI 
are  investigating,  among  other  things,  schemes  by  Target  Subject  Michael  Cohen  (a)  to  defraud 
multiple  banks  from  in  or  about  2016  up  to  and  including  the  present,  and  (b)  to  make  an  illegal 

^  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  February 
2,  2018. 

«  On  or  about  February  28, 2018  and  April  7,  201 8,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  search  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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campaign  contribution  in  October  2016  to  then-presidential  candidate  Donald  Trump.  As  noted, 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

1 3 .  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations 

in  and  omitted  material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banks”ln~^nection  wWTtransacfidtTintendedAo  feli^"“^^  of” 
approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  misrepresented  his  ability  to  pay  cash  by  failing  to 
disclose  cash  he  began  receiving  in  20 1 7  from  new  consulting  work;  (ii)  significantly  understated 
his  total  holdings  of  cash  and  cash  equivalents;  (iii)  failed  to  disclose  tens  of  thousands  of  dollars 
he  received  in  monthly  interest  income,  and  (iv)  failed  to  inform  the  banlcs  from  which  he  was 
seeking  debt  relief  that  he  had  agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party, 

in  connection  with^^^^^^^^^^|  acquisition  of  the  taxi  medallions  securing  Cohen  s 
debt.  By  making  these  misrepresentations  and  material  omissions,  Cohen  avoided  making 
monthly  payments  on  his  loans,  and  attempted  to  fraudulently  induce  the  banks  to  relieve  him  of 
certain  repayment  obligations  and  personal  guarantees  that  Cohen  and  his  wife  had  signed. 

14.  Additionally,  the  investigation  has  revealed  that  shortly  before  the  2016 
presidential  election,  Cohen  made  a  payment  of  $130,000  from  a  limited  liability  corporation 
(“LLC”)  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an  extramarital  affair  with 
then-candidate  Trump.  This  payment  was  made  to  Clifford  in  exchange  for  an  agreement  not  to 
make  any  public  disclosures  about  her  alleged  affair  with  Trump.  As  set  forth  below,  there  is 
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probable  cause  to  believe  that  Cohen  made  this  payment  to  Clifford  for  the  purpose  of  influencing 
the  presidential  election,  and  therefore  that  the  payment  was  an  excessive  in-kind  contribution  to 
the  Trump  campaign. 

15.  Based  on  my  review  of  emails  obtained  from  the  Cohen  Email  Warrants, 
information  obtained  pursuant  to  the  iCloud  Warrant,  and  documents  produced  pixrsuant  to 
subpoenas,  as  well  as  my  review  of  public  sources,  I  have  learned  that  Cohen  has  used  the  Subject 
Premiseito  (a)  receive  documentsTeT^'ed”to  the  transacTioT  intended  to  relievTCdheh^bf  MsWi" 
medallion  debt,  (b)  receive  documents  and/or  conduct  meetings  related  to  his  consulting  work,  (c) 
receive  documents  and/or  conduct  meetings  relating  to  his  finances  and  assets,  some  of  which,  as 
noted  above  and  as  detailed  further  herein,  he  has  concealed  from  the  banks  in  connection  with  the 
refinancing  of  his  taxi  medallion  debt,  (d)  receive  and  send  documents  relating  to  his  payment  to 
Chfford,  and  (e)  house  and  operate  electronic  devices  that  were  utilized  in  connection  with,  among 
other  things,  the  taxi  medallion  transaction,  Cohen’s  consulting  work,  and  his  payment  to  Clifford. 
Specifically,  as  described  below.  Subject  Premises- 1  likely  contains  evidence  concerning  Cohen’s 
taxi  medallion  loans,  his  negotiations  with  banks,  his  personal  finances,  his  consulting  work,  his 
tax  returns,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence, 
all  of  which  constitute  or  contain  evidence  of  the  Subject  Offenses.  Additionally,  as  described 
below.  Subject  Premises-2  likely  contains  evidence  relating  to  Cohen  s  consulting  work,  his 
finances,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence. 
Subject  Premises-3,  as  described  below,  likely  contains  evidence  relating  to  Cohen’s  assets  and 
finances,  including  assets  that  may  not  have  been  disclosed  to  banks  in  connection  with  the 
refinancing  of  Cohen’s  taxi  medallion  debt  or  documents  relating  to  such  assets,  and  documents 
or  evidence  related  to  Cohen’s  payment  to  Clifford.  Subject  Premises-4  likely  contains  electronic 
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devices,  including  Subject  Device-1  and  Subject  DeviCe-2,  which  themselves  contain  evidence  of 
the  Subject  Offenses,  including  concerning  Cohen’s  taxi  medallion  loans,  his  negotiations  with 
banks,  his  personal  finances,  his  consulting  work,  his  tax  returns,  and  his  payment  to  Clifford. 
Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that  the 
Subject  Premises  and  Subject  Devices  will  include  evidence  of  the  Subject  Offenses. 

B.  Probable  Cause  Regarding  Subjects’  Commission  of  the  Subject  Offenses’ 

The  BanltFrand  Scheme 
(i)  Cohen ’s  Statements  to  Sterling  National  Bank 
16.  As  set  forth  in  detail  below,  in  20 1 4,  Cohen,  through  LLCs  controlled  by  him  and 

his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling  National  Bank  (“Sterling  )  and 
the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions,  for  approximately  $20  million. 
Though  entered  into  by  LLCs,  the  loans  were  also  secured  by  personal  guarantees  in  the  names  of 
both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry  weakened  and  the  medallions  lost  value, 
Cohen  sought  to  renegotiate  the  terms  of  those  loans  and/ or  relieve  himself  from  their  obligations, 
including  the  personal  guarantees.  As  part  of  that  effort,  Cohen  made  a  series  of  representations 
to  Sterling  and  Melrose  about  his  net  worth,  assets,  available  cash  and  income,  among  other  things. 
Specifically,  based  on  my  review  of  records  maintained  by  Sterling  and  Melrose,  and  public 
sources  concerning  the  taxi  industry  and  the  value  of  taxi  medallions,  as  well  as  my  participation 
in  interviews  with  a  Sterling  executive  vice-president  (the  “Sterling  Employee-1”)  and  two  other 


’  In  the  following  recitation  of  probable  cause,  I  frequently  refer  to  phone  calls  or  text  messages 
involving  Cohen.  The  text  messages  described  herein  as  sent  or  received  by  Cohen  were  all  sent 
or  received  from  the  telephone  numbers  associated  with  Subject  Device- 1  or  Subject  Device-2. 
The  vast  majority  of  the  phone  calls  described  herein  made  or  received  by  Cohen  were  made  or 
received  by  the  telephone  numbers  associated  with  Subject  Device- 1  or  Subject  Device-2,  although 
in  certain  limited  instances  Cohen  used  a  landline  or  other  phone. 
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Sterling  employees  (“Sterling  Employee-2”  and  “Sterling  Employee-3”).  I  have  learned,  among 
other  things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  EEC  owns  two 
medallions).*  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  Capital  One  bank,  foFwEch  the  medalliWseived  akc^llat^lYCohm  was  n^^ 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  party  made  monthly  payments  to 
Cohen,  who  in  turn  used  some  of  those  proceeds  to  make  his  monthly  loan  payments  to  Capital 

One. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 
the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One.  By  m  or  about 
September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would  allow 
Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  m  value 
of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval  in  the 
taxi  industry — ^as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber  taxi  medalhon 
loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  market  value  of  taxi 
medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans— lUce  the  loans  held  by 
Cohen — were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee- 1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 

«  One  of  these  companies.  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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and  used  the  additional  funds  for  other  puiposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which 
according  to  letters  from  Capital  One  in  Sterling’s  files— was  greater  than  his  previous  debt  at 
Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This  allowed 

Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 

about  December  8, 2014,  each  of  Cdhen’TsixteeiTtaxi  mMallibtrEECs  entered  i^^^^ 

and  promissory  notes  with  Sterling  for  the  principal  sum  of  $1,375,000,  with  repayment  due  on 
December  8, 2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who  was  the 
sole  shareholder  of  the  LLC.  The  address  listed  for  each  of  the  LLCs  was  the  address  for  Subject 
Premises- 1 .  The  loans  were  also  each  secured  by  a  security  agreement,  dated  the  same  day,  making 
the  medallions  collateral  for  the  notes.  To  give  Sterling  additional  security,  Michael  and  Laura 
Cohen  signed  personal  guarantees  and  confessions  of  judgment,  giving  Sterling  the  right  to  pursue 
collection  against  the  Cohens’  personal  assets  were  their  corporations  to  default  under  the  loan 
agreements.  The  personal  guaranty  agreements  stated  that  the  LLCs  had  offices  at  the  address  for 
Subject  Premises-1,  and  contained  a  notice  provision  that  stated  that  any  notices  required  by  the 
agreements  should  be  mailed  to  Subject  Premises-1 .  In  total.  Sterling  agreed  to  lend  approximately 
$22  million  to  the  Cohens’  companies. 

d.  Pursuant  to  participation  agreements.  Sterling  transferred  45  percent  of  Cohen’s 
taxi  medallion  debt  to  Melrose.^ 


5  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit'Union  Administration  (  NCUA  ). 
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e.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions,  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling  s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.1°  p^om  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  know  that  Sterling  viewed  the 
transaction  favorably  because,  adddilntingroFloan  payments,  caMows  fro^ 
projected  to  be  positive,  the  value  of  the  collateral  (as  estimated  by  Sterling)  exceeded  $42  million, 
and  the  net  worth  of  Cohen— who  was  the  direct  obligor  under  the  guarantee  agreements— was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

f.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  bacldng  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies.  Additionally,  Cohen  began  falling  behind  on  loan  payments 
to  Sterling  and  Melrose.  I  know  from  records  maintained  by  Sterling  and  an  interview  with  Sterling 
Employee-2  that,  beginning  in  or  around  September  2015,  Cohen  told  Sterling,  m  sum  and 
substance,  that  the  individual  leasing  Cohen’s  medallions  had  fallen  behind  in  making  payments  to 
Cohen,  and  that  as  a  result,  the  monthly  cash  flow  fiom  his  taxi  medallions  had  been  reduced, 
leaving  him  with  a  shortfall  of  approximately  $16,000  each  month.  For  instance,  I  have  reviewed 
an  email  from  Sterling  Employee-2,  dated  September  9,  2015,  summarizing  a  call  with  Cohen— 
which  according  to  the  email  and  toll  records  for  Cohen’s  cellphone  occurred  on  September  8, 

Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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2015 — during  which  Cohen  told  Sterling  Eniployee-2,  in  sum  and  substance,  about  his  cash  flow 
problems  and  a  monthly  shortfall  of  approximately  $16,000.  In  that  same  email,  Sterling 
Employee-2  commented  that  despite  Cohen’s  statements,  his  personal  financial  information 
“indicate[d]  a  strong  ability  to  make  up  the  difference  in  payments.”  Cohen,  however,  according 
to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction  in  Cohen’s  monthly  payments. 

g.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 

interview  vvitrStMing~Employee^2rrhave  leamefl-that"Cohen  and  Sterling-Employee-2"spoke 

again  on  September  28, 2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
know  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  20 1 5 
and  November  2015,  Sterling  raised  the  possibility — ^both  internally  and  with  Cohen  of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.^^  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my 
review  of  loan  documents  and  records  maintained  by  Sterling,  I  know  that  in  or  about  November 
2015,  as  a  result  of  Cohen’s  representation  that  he  was  not  earning  sufflcient  returns  on  his 
medallions  to  cover  monthly  interest  payments.  Sterling  and  Melrose  agreed  to  amend  their  loans 
with  Cohen  by,  among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extending 
the  loan  maturity  date  to  December  8,  2017. 

h.  I  Imow  from  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2,  as  well 
as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee-1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  Fred  Weingarten,  who  would  agree  to 

Based  on  my  review  of  property  records,  I  know  that  on  or  about  October  28,  2015,  around 
the  time  period  when  Sterling  raised  the  possibility  of  Cohen  posting  his  personal  residence— 
Subject  Premises-1 — as  collateral,  Cohen  transferred  Subject  Premises- 1  into  a  trust. 
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assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2  referenced 
above,  I  knowthatby  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 

corporate  to 

for  the  balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  the  transfer  of  the  medallion  loans — ^and  because  Sterling  was  unfamllrar  with^^| 
Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3 1 , 20 1 7,  Cohen  told  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with^^^  Indeed,  in  an  email  sent  by  Cohen  to  Sterling  Employee-2  on  or 
about  February  22,  2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million  from  the  loan 
amount.” 

i.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 

was  requfred  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  to  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Melrose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
Melrose  agree  to  the  terms.  On  or  about  May  2, 20 17,  Sterling  Employee- 1  told 

that  Melrose  had  agreed  to  the  deal  in  principle,  and  that  Sterling  would  be  sending  the  parties  a 

term  sheet  shortly. 

j.  In  order  for  the  banks  to  conduct  diligence  and  evaluate  the  proposed  transaction 
fully,  they  requested  financial  infoiTnation  from  the  parties.  On  or  about  June  7,  2017,  SterUng 
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Employee- 1  emailed  Cohen  to  request  an  “updated  personal  financial  statement,”  completed 
jointly  with  Cohen’s  wife,  and  Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June 
8, 2017,  Cohen  emailed  Sterling  Employee- 1  a  Sterling  personal  financial  statement  form  that  had 
been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1,  2017 
(the  “May  2017  Financial  Statement”)  that  was  also  attached.  The  May  2017  Financial  Statement 
included  a  cover  letter  from  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen  rndThat  Getzel  had  nofconfirmed  its  accuracy 
or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The  May  2017 
Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash, 
$26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $11,000,000  personal  residence. 

k.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee- 1, 1  have  learned  that  Sterling  Employee- 1  reviewed  the  May  2017  Financial  Statement 
with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee- 1  asked  Cohen  about 
specific  line  items  on  the  financial  statement,  including  the  cash  amount,  value  of  medallions,  and 
total  liabilities.  Cohen  stated  to  Sterling  Employee- 1,  in  sum  and  substance,  that  the  May  2017 
Financial  Statement  was  accurate. 

l.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen  and  Allen 
Weingarten,  attaching  a  non-binding  term  sheet  memorializing  the  potential  transaction  between 


Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  the  precipitous  decline  in 
assets  fi-om  his  2014  financial  statement  to  his  2017  financial  statements  can  be  explained 
primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets  and  medallion 
investments. 
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Sterling,  Melrose,  Cohen,  anci 


The  term  sheet  included  a  cover  letter  addressed 


to  Cohen  at  Subject  Premises-1 .  The  parties  negotiated  the  provisions  of  the  term  sheet  and,  on  or 
about  September  5,  2017,  Sterling  Employee-1  sent  Cohen  a  copy  of  the 

executed  term  sheet.  According  to  the  term  sheet,  l^^^H^^fould  borrow  $20,000,000 
from  Sterling  and  Mehose,  to  be  secured  by  the  medallions  that 


Ivas  to  acquire  from 


Cohen. 

m.  As  part  of  th^agreernent,  accordmg  to  frielerm  sheef;Tf,2C5;9 13Tn  p^^^ 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banks,  with  Cohen  paying  fifty  percent  and  the  banks  dividing  the 
remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789,  respectively,  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance— despite  its 
prior  insistence  that  Cohen  malce  a  principal  pay-down  of  at  least  one  million  dollars— because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee-1,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  part  of  the  agreement.  Sterling 
and  Mehose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  ^^^^^|transaction,  Cohen  would  no  longer 

have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

n.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  fixll  credit  undei-writing  by  Sterling  and 
Mehose  (as  well  as  Melrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
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required  and  requested  additional  financial  statements  and  tax  returns  for  Cohen  and 
for  its  credit  underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  September  25, 
2017,  Cohen  emailed  Sterling  Employee-2  a  copy  of  his  2016  tax  return.  The  tax  return  listed 
Cohen’s  mailing  address  as  Subject  Premises-1.  Additionally,  on  or  about  October  5, 2017,  Cohen 
re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October 


6,  2017,  Cohen  emailed  Sterling  Employee-2  a  statement  of  financial  condition,  dated  September 


30, 2017  (the  “September  2017  FinanciafStatement”). 

o.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover  letter  from  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.^^  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (including  the  taxi  medallion  entities  and  his  real  estate  holdings), 
$3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence  (which,  for  the,first 


Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  this  further  decline  in 
assets  can  be  explained  primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets 
and  medallion  investments. 

Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thirty-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  which  was  considerably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen- Weingarten  term  sheet. 
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time,  he  indicated  was  held  by  a  trust).^^  The  September  20 1 7  Financial  Statement  included  assets 
and  liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions 
and  some  of  his  real  estate  investment  entities. 

p.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  around  the  time  Cohen  provided  Sterling 
with  these  financial  statements — i.e.,  in  or  around  September  2017  Cohen  stopped  paying 

monthl^Tloan  payments  on  his  taxi  medallTonToans  altogether.^v^ccordingi;o  Sterling  Empldyee^^ 

2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 
September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Cohen-^^^^^|;ransaction  was  favorable  for  the  banlc 

would  be  a  better  borrower  than  Cohen. 

q.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  The  demand  letter  was  addressed  to  Cohen  at 
Subject  Premises-1.  On  December  29,  2017,  Sterling  sent  Cohen  a  letter  stating  that  he  was  in 
default  under  the  loans  between  Sterling  and  Cohen’s  medallion  corporations.  The  notice  of 
default  was  addressed  to  Cohen  at  Subj  ect  Premises- 1 .  Cohen  did  not  make  an  immediate  payment 
on  the  loans,  but  instead  sent  an  e-mail  to  Sterling  Employee-1  on  or  about  January  24,  2018, 

Based  on  my  review  of  property  records  maintained  by  the  City  of  New  York,  and  my 
participation  in  an  interview  with  Getzel,  I  know  that  in  2015,  Cohen  transfemed  his  residence  to 
a  trust.  He  did  not  disclose  that  transaction  to  Getzel  or  Sterling  until  in  or  about  September  2017. 


-  that  is,  that 
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stating  that  during  the  closing  of  the  Cohen-^^^^^Jransaction,  Cohen  would  bring  all 
payments  up  to  date  as  well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  on 
January  24, 20 1 8,  that  at  the  closing  of  the  Cohen-''^^^^|  transaction,  Sterling  provide  a  letter 
stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal  guarantees  of  the 
medallion  loans  had  been  terminated. 

r.  The  Cohen-’'^^^^^|transaction,  however,  did  not  close.  On  or  about  January 
■^^^"^oYg^j^^^^^^^^l'attorne^mailed  attorney  foFSfefling  and  stated  that  “at  this  time 
there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have  changed  and  we  are  not  prepared 
to  go  forward.” 

s.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  know  that  after  the  Cohen-^^^^^|deal  fell  apart. 
Sterling  assigned  Cohen’s  loans  to  Sterling  Employee-3,  who  specializes  in  collecting  on 
defaulting  loans.  From  my  participation  in  an  interview  with  Sterling  Employee-3,  my  review  of 
telephone  call  notes  taken  by  Sterling  Employee-3,  and  my  review  of  telephone  records,  I  Icnow 
that  Sterling  Employee-3  spoke  several  times  to  Cohen  on  or  about  January  30, 2018  about  paying 
down  and/or  restructuring  Cohen’s  outstanding  taxi  medallion  loans.  On  the  calls,  which  in  total 
lasted  more  than  an  hour,  Cohen  stated  in  sum  and  substance  that  he  did  not  have  more  than 
$1,250,000  to  pay  toward  the  medallion  loans.  On  the  call,  in  the  course  of  reviewing  the  failed 
Cohen^^^^^^^l  transaction.  Sterling  Employee-3  questioned  Cohen  about  the  price 

to  have  paid  for  each  medallion,  and  whether  there  was  a  side  agreement  between 
Cohen  and  Cohen  denied  that  there  was  any  side  agreement  with 

t.  On  or  about  January  31,2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
paying  $500,000  to  bring  the  loans  current  and  $750,000  to  bring  the  principal  balance  to 
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$20,500,000.  Cohen  also  suggested  revised  monthly  interest  payment  amounts.  The  signature 
block  on  the  email  indicated  that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  On  or 
about  January  31,  2018,  Sterling  Employee-3  responded  to  Cohen  and  stated,  in  sum  and 
substance,  that  Cohen  would  need  to  pay  the  entirety  of  the  overdue  payments  and  pay  down  the 
principal  balance  of  the  loan  to  $20,000,000  (in  total,  a  payment  of  approximately  $1,750,000), 
and  would  need  to  make  larger  monthly  interest  payments. 

- ^ — UT--0mor-about  February-V2O18^Cohen  emailed-Sterling  Employee-3  and  proposed 

“[pjayment  of  $1.250m  which  ATT,  can  be  used  to  pay  down  principal,  if  [Sterling]  will  waive 
past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $1.250m.”  (Emphasis  in  original.) 
Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial  resources  to  post 
additional  collateral  or  pre-fund  monthly  payments.  The  signature  block  on  the  email  indicated 
that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-3,  I  have  learned  that  since  January  30,  2018,  Sterling  has 
continued  to  renegotiate  the  medallion  loans  with  Cohen  based  on  Cohen’s  representations  about 
his  current  financial  position.  In  particular,  according  to  Sterling  Employee-3,  Cohen  and  Sterling 
have  an  agreement  in  principal  to  restructure  Cohen’s  loans  based  in  part  of  Cohen’s  agreement  to 
make  a  principal  pa)nnent  of  approximately  $750,000,  to  make  a  payment  of  $500,000  to  become 
current  on  interest  payments,  and  to  post  $192,000  in  cash  collateral  for  his  future  monthly 
payments  on  the  loan.  Cohen  also  agreed  to  pledge  an  interest  he  had  in  a  property.  Sterling 
Employee-3  has  stated  that  had  Cohen  indicated  he  had  more  than  $1,250,000  available  to  him. 
Sterling  would  have,  among  other  things,  negotiated  for  a  larger  reduction  to  the  principal  amount 
of  the  loan. 
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(ii)  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 
r.nhp.n  r,0Ticea1ed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 
17.  As  set  forth  in  detail  below,  despite  multiple  written  and  oral  representations  by 
Cohen  to  Sterling  (and,  by  extension,  Melrose^^)  that  he  had  insufficient  funds  to  pay  down  the 
principal  balance  of  the  medallion  loans,  make  monthly  ■  interest  payments,  or  pay  past-due 
amounts,  it  appears  that  between  2016  and  the  present,  Cohen  opened  and  maintained  banlc 
accounts  at  First  R;^Blic~BMn“Fif^t  Republte’Ormd-then  received  m^i^^^^^^^ 
consulting  payments  in  these  accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these 
accounts  and  received  these  funds  during  the  very  period  in  which  he  made  disclosures  to  Sterlmg 
about  his  personal  finances  (including  his  assets  and  liabilities)  and  his  ability  to  malce  payments 
on  the  medalhon  loans.  In  these  disclosures  to  Sterling— and  despite  being  asked  about  these  bank 
accounts  by  his  accountant— Cohen  misled  the  bank  by  claiming  he  had  insufficient  liquidity  to 
satisfy  his  obligations  or  meet  the  banlc’ s  demands,  while  withholding  information  about  these 
ongoing  revenue  streams  and  liquid  financial  assets  at  First  Republic. 

18.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced 
pursuant  to  a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of 
interviews  with  a  First  Republic  sales  manager  (“First  Republic  Employee-1”)  and  a  First  Repubhc 
senior  managing  director  (“First  Republic  Employee-2”),  I  have  learned,  among  other  things,  the 

following: 


Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,^! 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Melr^^^^ 
Melrose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen-J^^^^ 
transaction.  Based  on  my  review  of  reports  of  interviews  witl^delros^mployees,  I  also  know 
that  Cohen  called  employees  at  Melrose  regarding  the 
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a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts  at  First  Republic,  some  in  his  own 
name  and  others  in  the  names  of  corporate  entities.  According  to  First  Republic’s  know-your- 
customer  records  on  Cohen,^"^  his  primary  physical  address  is  the  address  for  Subject  Premises- 1. 

b. .  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 
Consultants  Account”).  Cohen  was  the  only  authorized  signatory  orTthe  account.  According  to 

account  opening  documents,  the  primary  address  for  Essential  Consultants  LLC  was  the  address 
for  Subject  Premises-l.  When  Cohen  opened  the  Essential  Consultants  Account,  First  Republic 
Employee- 1  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account— the  answers  to  which  First  Repubhc 
Employee-1  entered  into  a  form^^ — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Cohen  also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the 
revenue  from  his  consulting  business— which  he  said  was  not  his  main  source  of  income— separate 
from  his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  as  described  below,  the  account  was  not  intended  to  receive  and  does  not 


Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

First  Republic  Employee- 1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel,  Fu-st 
Republic  Employee- 1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 

24 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  127  of  269 


appear  to  have  received — ^money  in  connection  with  real  estate  consulting  work;  in  addition,  the 

account  has  received  substantial  payments  from  foreign  sources, 

c.  I  know  from  my  review  of  First  Republic  bank  records  that  were  scheduled  by  an 
FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 
ftom  my  review  of  th^ssential  Consultants  ^count  schedule  ahd^Blic  sources,“I  Imow  the 
following: 

i.  Beginning  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  into  the  Essential  Consultants  Account  from  an  entity  called  Columbus  Nova 
LLC.  According  to  public  sources,  Columbus  Nova  is  an  investment  management  firm  controlled 
by  Renova  Group,  an  industrial  holding  company  based  in  Zurich,  Switzerland  that  is  controlled 
by  Russian  national  Viktor  Vekselberg.  From  January  2017  to  August  2017,  the  Essential 
Consultants  Account  received  seven  payments  totaling  $583,332.98  from  Columbus  Nova  LLC. 

ii.  Beginning  on  or  about  April  5,  2017,  the  Essential  Consultants  Account 
began  receiving  payments  from  Novartis  Investments,  SARL,  which  I  believe  to  be  the  in-house 
financial  subsidiary  of  the  Swiss  pharmaceutical  company  Novartis  International  AG  (  Novartis  ), 
Between  April  2017  and  February  2018,  the  Essential  Consultants  Account  received  eleven  wire 
payments  from  a  Swiss  bank  account  held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980, 
for  a  total  of  $1,099,780. 

iii.  Beginning  in  or  about  April  20 1 7,  the  Essential  Consultants  Account  started 
receiving  whe  payments  from  a  banlc  account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&T”)-  Specifically,  on  or  about  April  14,  2017,  AT&T  sent  $100,000  to  the 
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Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  ten  $50,000  payments  from  AT&T.  In  total,  AT&T  sent 
$600,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10,  2017,  June  9,  2017,  July  10,  2017,  and  November  27, 
2017,  the  Essential  Consultants  Accormt  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 

-sent  is  Korea-Aerospace^Industries  Ltd.  (“KAL”). . KALis^a^South  Korea-basedxompany-thaL 

produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 
Department  of  Defense,  among  other  customers. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertsbank,  a  Kazakhstani  bank.  The  listed  account 
holder  at  Kazkommertsbank  was  a  second  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 

vi.  In  total,  from  on  or  about  January  31, 2017  to  on  or  about  February  1,2018, 
the  Essential  Consultants  Account  received  approximately  $3,033,112.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  10,  2018,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23.  Cohen’s  withdrawals  from  the  Essential  Consultants 
account  reveal  that  it  was  used  for  largely  personal  purposes,  including  to  pay,  among  other  things, 
American  Express  bills  and  fees  from  “the  Core  Club,”  a  private  social  club  in  New  York. 

d.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  “MDC&A  Accoxmt”). 
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Cohen  was  the  only  authorized  signatory  on  the  account.  According  to  account  opening 
documents,  the  primary  address  for  MDC&A  Account  was  the  address  for  Subject  Premises- 1. 
Among  other  things,  the  MDC&A  Account  received  ten  wire  transfers  and  one  check  from  an 
account  in  the  name  of  Squire  Patton  Boggs,  a  law  firm.  As  noted  above.  Subject  Premises-2  is 
located  inside  the  New  York  office  of  Squire  Patton  Boggs.  In  total,  from  on  or  about  April  5, 
2017,  to  on  or  about  January  2, 2018,  the  MDC&A  Account  received  $426,097.70  in  deposits,  and 
the  balanceln  die  ac^count  as  of  Janu¥ryT,^20rg7"^OT754i:35.  As“discussed-b-eloweohen- 
never  disclosed  any  of  the  balance  in  the  Essential  Consultants  or  MDC&A  accounts  to  Sterling 
during  the  negotiations  with  respect  to  the  transaction  or  the  subsequent  loan 

refinancing  negotiations,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

19.  Based  on  my  review  of  emails  that  were  seized  pursuant  to  the  Cohen  Email 
Warrants,  and  my  review  of  reports  of  interviews  with  employees  of  AT&T  and  Novartis,  it 
appears  that  the  aforementioned  payments  to  the  Essential  Consultants  Account  and  MDC&A 
Account  were  for  political  consulting  work,  including  consulting  for  international  clients  on  issues 
pending  before  the  Trump  administration.  Specifically,  from  my  review  of  emails  from  the  Cohen 
Gmail  Account,  the  Cohen  MDCPC  Account,  and  public  sources,  I  have  learned  the  following; 

a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe 
is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  “Consulting  Agreemenf  ’  between  KAI  and 
Essential  Consultants  dated  as  of  about  May  1,  2017.  The  agreement  indicates  that  Essential 
Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that  Essential 
Consultants  would  render  “consulting  and  advisory  services,  as  requested”  by  KA.I,  and  that  KAI 
would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Two  Hundred  Thousand 
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($1,200,000.00)  US  Dollars,”  disbursed  through  eight  $150,000  installments  between  May  2017 
and  December  2017.  I  have  also  reviewed  invoices  in  amounts  of  $150,000  that  Cohen  emailed 
to  an  individual  whom  I  believe  is  affiliated  with  KAI.  At  the  top  of  the  invoices  the  address  listed 
for  Essential  Consultants  is  the  address  for  Subject  Premises-2. 

b.  On  or  about  May  8,  2017,  Cohen  sent  an  email  to  an  individual  whom  1  believe  is 
affiliated  with  BTA  Bank.  The  signature  block  on  Cohen’s  email  listed  “Essential  Consultants 
LLC”  and  “Michael  D.  Cohen  &  Associates,  PC”  and  proviclecTthe  address  for  Subject  Premises- 
2.  In  the  email,  Cohen  attached  a  document  purporting  to  be  a  “Consulting  Agreemenf  ’  between 
BTA  Bank  and  Essential  Consultants  dated  as  of  about  May  8, 20 1 7.  The  agreement  indicates  that 
Essential  Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that 
Essential  Consultants  would  render  “consulting  and  advisory  services’  to  BTA  Bank,  and  that 
BTA  Bank  would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Eight  Hundred 
Thousand  ($1,800,000.00)  US  Dollars,”  disbursed  through  monthly  payments  of  $  1 50,000.  On  or 
about  May  10, 2017,  Cohen  sent  an  email  to  an  employee  of  BTA  Bank,  and  attached  to  the  email 
an  invoice  to  BTA  Bauk  in  the  name  of  Essential  Consultants,  with  the  address  of  Subject  Premises- 
2.  The  invoice  contemplated  a  $150,000  payment  to  Essential  Consultants  for  a  “monthly 
consulting  fee.” 

c.  On  or  about  January  23,  2017,  Cohen  appears  to  have  entered  into  a  consulting 
agreement  with  AT&T,  which  contemplates  that  Essential  Consultants  “shall  render  consulting  and 
advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential  Consultants]  of  those  issues 
and  matters  with  respect  to  which  AT&T  Services  desires  [Essential  Consultants] ’s  assistance  and 
advice.”  The  agreement  indicates  that  Essential  Consultants  had  the  address  of  Subject  Premises- 
1.  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his  services  ...  a  consulting  fee  of  Fifty 
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Thousand  ($50,000)  Dollars  ...  per  month.”  Based  on  my  review  of  reports  of  interviews  with 
AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen  to  consult  on  political  issues, 
including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner,  and  tax  reform. 

d.  On  or  about  March  1 ,  20 1 7,  Cohen  appears  to  have  entered  into  a  contract  between 
Novartis  and  Essential  Consultants,  which  provides  that  Essential  Consultants  will  “provide 
consulting  and  advisory  services  to  Novartis  on  matters  that  relate  to  the  repeal  and  replacement  of 
the-Affordabl^Care-AGt~  in~-the  US  and^any-^other  issues  mutually- agreeable^to  [Essential 
Consultants]  and  Novartis.”  The  contract  provides  for  a  “consulting  fee  of  One  Million  Two 
Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to  Essential  Consultants  in  equal  monthly 
installments  over  the  course  of  a  year.  Based  on  my  review  of  reports  of  interviews  with  Novartis 
employees,  I  have  learned  that  Novartis  retained  Cohen  to  provide  political  consulting  services  and 
to  gain  access  to  relevant  policymakers  in  the  Trump  Administration. 

e.  In  or  about  February  2017,  Cohen  began  negotiating  the  terms  of  a  “strategic 
alliance”  with  Squire  Patton  Boggs.  On  or  about  March  4,  2017,  Squire  Patton  Boggs  emailed 
Cohen  a  “strategic  alliance  agreement.”  Under  the  terms  of  the  agreement,  Cohen  agreed  to 
generate  business  for  the  law  firm,  and  Squire  Patton  Boggs  agreed  to  pay  to  Cohen  “an  aimual 
strategic  alliance  fee  of  $500,000,  payable  in  twelve  (12)  equal  monthly  installments.”  Squire 
Patton  Boggs  also  agreed  to  provide  Cohen  with  “dedicated  and  segregated  office  space  in  [Squire 
Patton  Boggs’s]  New  York  and  Washington  D.C.  offices,  which  office  space  shall  be  physically 
separate  from  [Squire  Patton  Boggs’s]  offices  and  have  locked  doors  and  its  own  locked  file 
cabinets.”  On  or  about  April  3,  2017,  Squire  Patton  Boggs  announced  on  its  website  that  is  had 
formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would  “jointly  represent 
clients.” 
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20.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
provided  by  Getzel  (as  noted  above,  Cohen’s  accountant  at  the  time),  my  participation  in  an 
with  Getzel,  my  notes  I 

have  learned  the  following: 

_ _ a _ ^In-or-about-May-20-17,--GetzeLmet-with-Gohen-at-SubjecfPremises-2 — At_the 

meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice  called  Michael 
D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants  EEC.  Cohen 
told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in  connection  with 
his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to  be  between  five 
and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  in  which  Getzel 
wrote  that  “[ajttached  is  a  draft  of  the  new  PFS  as  of  September  30,  2017”  and  attached  a  draft  of 
the  September  2017  Financial  Statement.  The  draft  statement  reflected  that  as  of  September  30, 
2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately  $33,430,000  (comprised  of 
taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence  and  property),  and  habilities 
of  approximately  $45,630,000,  leaving  him  purportedly  over  $12  million  in  debt.  In  the  same  email, 
Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact  that  the  financial  statement  did  not 
list  any  value  associated  with  either  the  Essential  Consultants  Account  or  the  MDC&A  Account: 
“[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  —  Michael  D.  Cohen  &  Associates 
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POC  [sic]  and  Essential  Consultants  LLC.  Please  advise  whether  or  not  these  should  be  disclosed 
and  what  value.” 

c.  On  or  about  October  6,2017,  Cohen  called  Getzel  by  telephone^  ^which  is  reflected 
on  toll  records  for  Cohen’s  cellphone— and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value.  On  or  about  October  6,  2017,  following  the  call  with  Getzel,  Cohen,  usmg  the  Cohen 
Account,  respradedto  Getzel’s  emffl  with  the  answer  '‘[l]66k¥^Ad  toTne:’’“Cohen  never  d^^^ 
Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 
Statement.  In  a  letter  dated  October  6,  2017,  addressed  to  Getzel,  Cohen  stated,  “I  have  reviewed 
the  attached  statement  of  financial  condition  and  find  it  to  be  correct  and  consistent  with  the 
representations  that  I  made  to  your  firm.  The  attached  is  an  accurate  reflection  of  my  assets, 
liabilities  and  net  worth  (deficit)  as  of  September  30,  2017.”  Attached  to  that  letter  was  the 
September  2017  Financial  Statement,  which,  as  noted  above,  was  then  transmitted  to  Sterlmg  m 
connection  with  the  proposed  taxi  medallion  transaction  between  Sterling,  Cohen,  andH^^^^^fH 

21 .  Based  on  my  review  of  a  report  of  an  interview  with  Sterling  Employee-1, 1  have 
learned  that  Cohen  did  not  disclose  his  income  stream  from  Essential  Consultants  to  Sterlmg 
Employee-1  or,  to  his  knowledge,  anyone  else  at  Sterling.  According  to  Sterling  Employee-1, 
knowledge  of  such  an  income  stream  would  have  affected  Sterling’s  demands  during  the 
negotiations,  particularly  with  respect  to  the  amount  of  a  principal  paydown  of  Cohen’s  debt 

Cohen  Understated  His  Available  Cash 

22.  In  addition  to  withholding  the  existence  of  his  Essential  Consultants  income  from 
Sterling  and  Melrose,  it  appears  that  Cohen  also  substantially  understated  his  available  cash  and 
cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  from  my  review  of  the  September 
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2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen  represented  that  he  had 
$1,250,000  in  cash  as  of  September  30,  2017.  I  also  know  that  on  or  about  January  30,  2018,  in  a 
•  telephone  call  with  Sterling  Employee-3,  and  on  February  1,  2018,  in  an  email  to  Sterling 
Employee-3,  Cohen  represented  that  he  did  not  have  more  than  $1,250,000  in  cash.  But,  from  my 
review  of  a  summary  of  bank  records  that  were  scheduled  by  forensic  accountants,  I  have  learned 
that  Cohen  had  approximately  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30,  2017. 

“MditidhaUiTa^f  Febinafy'lT^ZOrsrCbKen  had  appoxtotel5^$6-000,000 

equivalents.  Specifically,  from  my  review  of  the  account  schedule  and  bank  records,  I  have  learned 
the  following: 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank.  As  of  February  1, 
2018,  Cohen  had  a  total  of  $1,389,245.78  in  these  accormts. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 
As  of  February  1, 2018,  Cohen  had  $1,284,996.13  in  these  accounts. 

c.  As  of  September  30, 20 1 7,  Cohen  had  $260,689.1 8  in  an  account  at  Signature  Bank. 
As  of  February  1, 2018,  Cohen  had  $261,517.55  in  this  account. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic.  As  of  February  1, 2018,  Cohen  had  $3,332,992.95  in  these  accounts. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30, 2017. 

f.  As  of  September  30, 20 1 7,  Cohen  had  $  1 7,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  his  name  and  one  held  jointly  with  his 
wife.  Cohen  also  has  a  safety  deposit  box  at  TD  Bank — Subject  Premises-3.  The  safety  deposit 
box  was  opened  on  December  13,  2017  in  the  names  of  Michael  and  Laura  Cohen. 

- h— Infotalyas^of  September-3 07201-77Cohen  had  atTeast-$477T3-935::08  in  his  aceounts- 

at  Capital  One  Bank,  City  National  Bank,  Signature  Bank,  Sterling  Bank,  Bethpage  Credit  Union, 
First  Republic,  and  Morgan  Stanley.  As  of  February  1,  2018,  Cohen  had  $6,268,732.59  in  his 
accounts  at  Capital  One  Banlc,  City  National  Bank,  Signature  Bank,  First  Republic,  and  Morgan 
Stanley.^^ 

23.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  written  and  oral 
representations  to  Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and 
that  Cohen  withheld  information  regarding  approximately  $5  million  in  hinds  from  Sterling  and 
Melrose  in  order  to  secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on 
my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews 
with  Sterling  Employee- 1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling 
and  Melrose  would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to 
renegotiate  Cohen’s  medallion  loans  and  on  what  terms,  or  to  its  decision  whether  approve  of  the 
transfer  of  those  to 

Based  on  my  review  of  the  account  schedules  described  above,  I  loiowthat,  as  of  the  date  of  this 
affidavit,  the  account  balances  for  TD  Bank  have  not  yet  been  included  in  the  schedule  for  either 
date  and  the  account  balances  for  Sterling  National  Bank  and  Bethpage  Credit  Union  have  not  yet 
been  included  in  the  schedule  for  February  1,  2018.  Thus,  to  the  extent  that  these  accounts  have 
positive  balances,  Cohen’s  total  balances  in  fact  were  even  higher  on  these  dates. 
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Cohen  Has  Unreported  Interest  Income 

24.  It  appears  that  Cohen  also  hid  from  Sterling  interest  income  that  he  was  receiving  in 
connection  with  a  six  million  dollar  loan  he  made  to  another  individual.  Specifically,  I  know  from 
my  review  of  the  May  2017  Financial  Statement  and  September  2017  Financial  Statement  that 
Cohen  provided  to  Sterling  that  Cohen  did  not  disclose  that  he  had  made  a  note  receivable  in  the 
amount  of  approximately  $6  million,  or  that  he  was  earning  approximately  $60,000  per  month  in 

Tntere^rincome“hrconnection'with  tha1rloanr'BuVfromTmy-review  of  a  summary-of-banfcrrecords 

that  were  reviewed  by  another  law  enforcement  agent,  my  review  of  property  records  and 
documents  obtained  pursuant  to  the  Cohen  Email  Warrants,  and  my  participation  in  an  interview 
with  Getzel,  I  have  learned  the  following: 

a.  Based  on  my  review  of  property  records,  I  have  learned  that  on  or  about  March  12, 

Cohen  agreed  to  lend  approximately 

$2,000,000.^°  It  appears  that  the  promissory  note  was  unsecured  by  any  real  property.  On  or  about 
April  28,  2014,  Cohen  and||||^^^  amended  the  promissory  note,  and  restructured  the  loan  to 
increase  the  principal  amount  to  approximately  $5,000,000.  Under  the  terms  of  the  amended 
promissory  note,  the  loan  was  secured  apartment  in  Sunny  Isles  Beach,  Florida.  On 

or  about  April  8,  2015,  Cohen  and^^^|:estated  the  promissory  note  to  increase  the  principal 
amount  to  $6,000,000.^* 

b.  Based  on  my  review  of  a  copy  of  the  restated  note,  which  was  obtained  pursuant  to 
the  Cohen  Email  Warrants,  I  have  learned  that  under  the  terms  of  the  amended  and  restated 


I  learned  from  that 

The  note  states  that  the  loan  is  to  husband  and  wife, 

jointly  and  severally.  For  ease  of  reference,  I  refer  simply  to  herein. 
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promissory  note,  Cohen’s  loan  to  an  interest-only  loan,  and  that  the  principal  balance 

of  the  loan  bears  interest  at  an  annual  rate  of  12.25  percent.  I  also  loiow  that  the  amended  and 
restated  promissory  note  includes  a  schedule  of  payments  that  require  Cohen 

approximately  $61,250  per  month  beginning  in  April  2015  and  ending  in  Aprd  2019.  The  note  also 


requires  that 


I'epay  the  principal  balance  of  $6,000,000  on  April  28,  2019. 
c.  Based  on  my  review  of  bank  records,  I  have  learned  that,  consistent  with  the  terms 

ha^TnMeTnonthly  payments-of- 


of  the”^ended  and  restatedTpromissory  note, 
approximately  $61,250  since  April  2015.  Specifically,  based  on  my  review  of  records  maintained 
by  Capital  One  Bank,  I  have  learned  that  from  April  2015  to  October  2015,  Cohen  received  checks 


from  an  entity  callec| 


[  totaling  $6 1,250  per  month,  which  he 


deposited  into  his  personal  bank  account  at  Capital  One  Banlc.^^  It  appears  from  my  review  of  bank 


records  and  public  sources  thal| 


I  is  the  owner  of 


From  my  review  of  records  maintained  by  Capital  One  Banlc,  I  have  also  learned  that  since  October 


2015,  Cohen  has  received  checks  from  an  entity  called 


totaling 


$61,250  per  month,  which  he  deposited  into  his  personal  bank  account  at  Capital  One  Bank.  It 


is  also  the  owner  of  \ 


appears  from  my  review  of  banlc  records  and  public  sources  that^^l 

In  total,  it  appears  that  Cohen  receives  approximately  $735,000  per  year 

in  interest  payments  from 

d.  Based  on  my  review  of  Cohen’s  May  2017  and  September  2017  Financial 
Statements,  my  review  of  his  20 1 5  and  20 1 6  tax  returns  obtained  via  subpoena  and  from  the  Cohen 
Email  Warrants,  and  my  participation  in  an  interview  with  Getzel,  I  have  learned  that  Cohen  did 


In  April  20 1 5,  Coh^^^ceived  a  pro-rated  payment.  F or  all  months  thereafter,  the  total  payment 
equaled  $61,250,  but  BIA  payment  in  multiple  checks. 
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not  disclose  this  interest  income  he  was  receiving  from  ^^^^|to  Sterling  or  Melrose,  or  list  it 
on  his  tax  returns.  I  have  also  learned  that  while  this  interest  income  is  taxable,  Cohen  did  not  tell 
Getzel — his  accountant — ^about  the  income,  and  Getzel  only  learned  about  the  income  because  he 
began  doing  l^^^^^|:axes  in  2017.^^ 

25.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to 

Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen 
withheld  information  relating  to  the  interest  income  he  is  receiving  from  order  to 

secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan. 

Cohen  Had  a  Side  Agree]  1 1 1  1 1 1  1 1 

26.  As  set  forth  in  detail  below,  during  the  course  of  Cohen’s  negotiations  to  sell  his 

interest  in  taxi  medallions  and  the  associated  debt  to  Cohen  not  only 

misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  agreement  he 
had  negotiated  witb^^^^^^  it  appears  that^^^^^^agreed  to  pay  an  above-market  price 
for  Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay  ^^^^^^|ipproximately 
$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  my  paiticipation  in  interviews  with  Sterling  Employee- 1,  Sterling  Employee-2, 
and  Sterling  Employee-3, 1  have  learned,  among  other  things,  the  following: 

a.  On  or  about  September  5,  2017,  an  executed  term  sheet  was  circulated  by  Sterling 
Employee-1  to  Cohen  and  The  term  sheet  listed  Cohen’s  address  as  the  address  for 

Subject  Premises-1.  According  to  the  term  sheet, would  borrow  $20,000,000 
from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that  ^^^^^^|was  to  acquire  from 


Accordingly,  this  interest  income — ^which  should  have  been  reported  as  such  on  Cohen’s  tax 
returns — ^is  included  herein  in  calculations  of  Cohen’s  true  cash  position. 
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Cohen.  At  a  price  of  $20  million  for  thirty-two  taxi  medallions,  the  proposed  transaction  valued 
each  medallion  as  worth  $625,000.  The  term  sheet  also  contemplated  a  $1,265,913  pay-down  of 
the  principal  balance  of  the  loan.  The  term  sheet  made  no  mention  of  a  $3.8  million  payment  from 
Cohen  to  or  any  other  form  of  payment  or  financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 
describing  the  terms  of  the  Cohen^^^^|transaction  and  the  new  loan  to  did 

not  mention  any  payments  fFom  C^eH’ter^^^^ln51udih^$3:8THilliOn^p^^ 
memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medalhon”  but  “it  is  recognized  that  this  is  not  in  line  with  current  market  values.  Indeed, 
according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
2018,  taxi  medallions  sold  for  amounts  ranging  from  $120,000  to  $372,000.  According  to  Sterling 
Employee- 1  and  Sterling  Employee-2,  they  were  never  told  tha^^^^|agreed  to  a  purchase 
price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  malce 

any  payment  to 

c.  On  or  about  January  30,  2018,  Sterling  Employee-3  asked  Cohen  whether  Cohen 
had  a  side  agreement  with^^^^^to  pay^^^^^a  sum  of  money  for  entering  into  the 
medallion  transaction.  Sterling  Employee-3  asked  Cohen  about  such  an  arrangement  because, 
according  to  Sterling  Employee-3,  the  price  that  ^^^^|was  paying  for  each  medallion 
appeared  to  be  well  above  the  market  price.  Cohen  stated,  in  sum  and  substance,  that  he  had  no 

side  agreement — and  never  had  a  side  agreement  with 

27.  While  Cohen  and^^^^^^^Hdid  not  disclose  any  payment  from  Cohen  to 
j^^^^in  communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  my  participation  in  an  interview 
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with  Getzel,  I  have  learned  the  following,  in  substance  and  in  part,  regarding  the  proposed  side 
payment  from  Cohen  to  ||||||||||||^^ 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  “Getzel  Memorandum”). 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and^^^^^^^f 
in  part,  as  follows;  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 


entities  to  a  Buyer  who  will  assume  their  banlc  mdebtedness,  upon  the  [Cohens’tpaying^down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800,000.”^^ 
b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 
payment  of  $3,800,000  to  Getzel  did  not  know  where  Cohen  was  going  to  obtain 

$3  800,000  to  pay  |m||H  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 
cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $1.25  million  in  cash. 

28  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 

with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 
involved  m  the  potential  deal  with  Cohen  and^^^^^^|vas  aware  of  the  planned  $3.8  million 

side  payment  from  Cohen  to 

The  Illegal  Campaign  Contribution  Scheme 
29.  The  USAO  and  FBI  are  also  investigating  a  criminal  violation  of  campaign  finance 
laws  by  Michael  Cohen.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen  made 


The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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an  excessive  in-kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald 
Trump  in  the  form  of  a  $130,000  payment  to  Stephanie  Clifford,  an  individual  who  was  rumored 
to  have  had  an  extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that 
alleged  affair.  As  set  forth  below,  there  is  probable  cause  to  believe  that  this  payment  was  intended 
to  keep  Clifford  from  making  public  statements  about  the  rumored  affair  on  the  eve  of  the  2016 
presidential  election,  and  thus  constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 

307  From  my  review  of  public^ources7 T have  learnerl  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  11,2011,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  E!  News  that  “[t]he  totally  untrue  and  ridiculous  story  . .  .  emanated  from 

a  sleazy  and  disgusting  website _ The  Trump  Organization  and  Donald  J .  Trump  will  be  bringing 

a  lawsuit  .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

31.  On  or  about  June  16,  2015,  Trump  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4,  2016,  Trump  became  the  presumptive  Republican  Party  nominee 
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for  president,  and  on  July  19,  2016,  Trump  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  18,  2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 

32.  On  or  about  October  7,  2016,  The  Washington  Fos't  published  online  a  video  and 
accompanying  audio  in  which  Trump  referred  to-women-in-what  the  article-describeiasAvulgar-- 
terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The 
following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he  stated,  among  other 
things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  loiows  me  knows  these  words  don’t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that 
representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

33.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Slate 
magazine  by  a  reporter  who  interviewed  Clifford,  I  have  learned  that  around  this  same  time,  in  or 
about  October  2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and 
Slate  magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement 
about  her  alleged  relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author 
based  on  conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to 
be  paid  for  her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized 
in  a  20 1 8  email  obtained  pursuant  to  the  Cohen  Email  Warrants :  “In  October  20 1 6, 1  was  contacted 
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by  counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  20 1 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

34.  From  my  review  of  telephone  toll  records^^  and  information  produced  pursuant  to 
the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 

Tnc-(“AMF’)7i;he-publisher  of  theWhttzo«a/-En^wz>er,^^  Trumprand-Hope  Hicksrwho-was  them 

press  secretary  for  Trump’s  presidential  campaign.  Based  on  the  timing  of  these  calls,  and  the 
content-  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following; 

a.  On  October  8, 2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes. 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 


My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’ s  telephone  pursuant  to  the  iCloud  W arrant. 

Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 

in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

^  c.  At  7’:39"p  m.,  immediatelyTfteHth^secbAd^all^ith  Htek^endedrCohemcaU 

David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 

other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 

eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
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believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:31  a.m.,  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake, 
please  call  my  cell.” 

f.  The  following  day,  on  October  1 0, 20 1 6,  at  1 0 : 58  a.m.,  Howard  sent  a  text  message 
toCohi^  and  Davidson,^hich  stated:  ^^KSth/Michaerdormectm^^ 

business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanlts.  Dylan.  Over  to  you  two.”  At  12:25  p.m.,  Davidson  sent  Cohen  a  text  message 
that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to  be  today. 
Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  client  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.^* 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  1 0, 20 1 6,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreemenf  ’  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document. 


As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  Clifford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10, 2016. 

35.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  First 
Republic,  as  well  as  my  participation  in  interviews  with  First  Republic  employees,  I  have  learned 
the  following: 

a.  On  the  morning  of  October  13, 2016,  at  8:54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  Ftowever,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
conununications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 
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b.  At  9 :23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  F irst  Republic  Employee- 
2.  The  email  attached  documents  from  the  Secretary  of  State  of  Delaware  indicating  that  Cohen 
had  formed  a  limited  liability  company  called  “Resolution  Consultants  LLC”  on  September  30, 
2016.  As  noted  above,  “Resolution  Consultants”  is  the  name  of  the  entity  that  Cohen  had  told 
Howard  he  had  formed  recently  after  Howard  said  Davidson  would  “do  it.”  At  10:44  a.m.,  Cohen 
called  First  Republic  Employee-2  and  told  him,  in  sum  and  substance,  that  he  needed  an  account 

-in  the-name-of^Resolution  Consultants— opened  immediately,-and  that  he  did  not-wantan  address 

on  the  checks  written  out  of  the  account.  Later  that  day,  another  employee  at  First  Republic 
emailed  Cohen  account  opening  paperwork  to  complete.  Cohen  returned  the  account  opening 
documents  partially  completed,  but  failed  to  provide  a  copy  of  his  driver’s  license  or  passport,  and 
did  not  respond  to  the  employee’s  question  of  how  he  wanted  to  fund  the  account.  As  a  result,  the 
account  was  never  opened. 

c.  On  October  1 7, 20 1 6,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

36.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford, 
and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
iCloud  Warrant,  and  public  sources,  I  know  the  following:  ■  . 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’s  email  account  hosted  by  the  Trump  Organization,  on  October  17, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.^^  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 

agreement  and  whether  Clifford  would  go  public.  Specifically. 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told 

they’re  going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 

tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 

Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 

seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

V  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  Not  taking  my 

calls.”  Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach? 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  USAO  has  not  requested 
documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the  emai 
referenced  in  this  article. 
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investigation,  I  understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Tmmp  had  an  extramarital  affair  with  Clifford.,  However,  the 
article  noted  that  Clifford  had  declined  to  comment.  

37.  On  or  about  October  25,  2016,  the  communications  between  Cohen,  Davidson, 
Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford. 
Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email 
Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 
minutes.  At  7:1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9 :04  a.m. — less  than  thirty  minutes  after  speaking  with  Trump — 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  yooi  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
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email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  F irst  Republic  Employee-2  and  told  him,  in  sum 
and  substance,  that  he  decided  not  to  open  an  account  in  the  name  of  “Resolution  Consulting  and 
instead  would  be  opening  a  real  estate  consulting  company  in  the  name  of  “Essential  Consultants.” 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Trump  Tower,  and  wanted  to  go  to  a  First 

RepuWic  branch  acros^s  the  street  tdT)pinthe^ccountrTdTirsfRepblic  Employee=^ 

Republic  Employee-1,  a  preferred  banker  at  that  branch,  assist  Cohen.  At  11:00  a.m..  First 
Republic  Employee- 1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First 
RepubUc  Employee- 1 ,  that  around  the  time  of  the  call  he  went  to  Cohen’ s  office  in  Trump  Tower- 
on  the  same  floor  as  the  Trump  Organization^ — and  went  through  account  opening  questions, 
including  Icnow  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account — ^the  answers  to  which  First  Republic 
Employee- 1  entered  into  a  form— Cohen  stated,  in  sum  and  substance,  that  he  was  openmg 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consultmg 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based,  on  my  review  of  records  obtained  from  First  Republic,  it  appears  that  this  account  (the 
“Essential  Consultants  Account”)  was  created  at  a  time  between  11:00  a.m.  and  1:00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Banlc. 

f  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
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Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October  26, 
2016,  First  Republic  Employee-2 ’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  callfne.  Important.”  Cohen  called  Howard  at  7.00  p.m. 
and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  EEC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 

38.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000— with  the 
funds  intended  for  Clifford — -for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
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toll  records,  bank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen 

Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 

the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  EEC.  I  thank  you  in  advance  for 

your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account— 
which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit  ^to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 

to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating.  I 
confirm  that  I  wdl  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  EEC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  10:50  a.m..  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 

payment  had  been  sent  and  providing  him  with  the  wire  number. 

39.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction 
with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant 
to  the  iCloud  Warrant,  public  sources,  and  bank  records,  I  Icnow  the  following: 

50 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  153  of  269 


a.  On  October  28, 20 1 6,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  Kd3.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  20 1 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  EEC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  [Dennison]”  in  exchange  for 
$130,000.  The  agreement  provided  that  “EC,  EEC”  would  wire  the  funds  to  “Peterson’s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 
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LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in  the 
agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
“^^apicture  of  aFedEx deliv^'confirma  statingthaf at  appfbximatNy  9:09  aTmT^a"packa:ge 

shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regardmg  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  llie  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  houi*  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

40.  OnNovember  4, 2016,  just  three  days  after  the  Clifford  transaction  was  completed 
and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an  article 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Trump  had  an  affah.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
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Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — -just  days  before  Election 
Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent  Howard 

a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Tmmp  Organization 
lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 
want  to  pushher  over  the  edge.  She’s  on  side  atpresent  and  we  have  a  solid  position  and  aplausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
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plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  pui-ported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated  “he’s 
pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
publish  its  article  if  “eveiyone  denies.”  Howard  responded,  “Because  there  is  the  payment  from 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approxhnately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m..  Hides  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across.  The  next 
morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far  I  see  only 
6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  prayhigl!  It’s  working!” 
Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
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statement  by  Storm  denying  everything  and  contradicting  the  other  pom  stars  statement.  I  wouldn’t  r 

use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on  my 

involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced  recorded 

audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  sueh  a  statement 

could  be  used  to  influenee  potential  negative  media  relating  to  Trump,  but  was  unneeessary  at  that 

time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that  morning,  Peeker 

spoke  to  Trump. - - — — - - - - - ? 

41.  On  or  about  November  8, 2016,  Trump  won  the  eleetion  for  President  of  the  United  J 

States.  I 

42.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  government 
watehdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  eampaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my  review  publie 
sourees  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  eomplaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mi'.  Trump  and  Ms.  Clifford.  Despite  the  faet  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  mateh  the  offer  and 
keep  the  story  from  breaking.  I  knew  the  allegation  to  be  false,  but  /  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn  ’t 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
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occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgeme;nt  that  the  allegation  of  the  affair  had  existed  for  some  time  {“...the  2011 

story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,2018,  Cohen  was  asked  by  TheNew  York  Times  v/heHiQr 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that;  “In  a  private  transaction  in  2016, 1  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbrnrsed  me  for  the  payment,  either 
directly  or  indirectly.’’ 

43 .  On  or  about  March  9,2018,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 
from  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  banlc.  ’ 
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44.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that 
Cohen  committed  violations  of  the  Campaign  Finance  Offenses  by  making  an  in-ldn4  contribution 
to  Trump  or  the  Trump  campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the 
election.  Indeed,  while  he  denies  having  given  an  unlawful  contribution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $130,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment 
occurred  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
about  his  behavior  toward  women,“even  though^  alle^ibnsA)f^traffair  between"^Trunip  and~ 
Clifford  existed  since  2011.  In  addition,  the  communication  records  set  forth  above  make  evident 
that  Cohen  communicated  with  members  of  the  Trump  campaign  about  his  negotiation  with 
Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

C.  Probable  Cause  Justifying  Search  of  the  Subject  Premises  and  Subject  Devices 

45.  Based  on  the  foregoing,  my  review  of  records  produced  pursuant  to  subpoenas  and 
the  Cohen  Kmai!  Warrants,  and  the  iCloud  Warrant,  and  my  training  and  experience,  there  is 
probable  cause  to  believe  that  the  Subject  Premises  and  Subject  Devices  have  been  used  in 
furtherance  of  the  Subject  Offenses  and  are  likely  to  contain  instrumentalities,  evidence,  and  fruits 
of  the  Subject  Offenses.  Specifically,  there  is  probable  cause  to  believe  that  Cohen  permanently 
resides  at  Subject  Premises-1  and,  at  least  in  part,  works  at  both  Subject  Premises-1  and  Subject 
Premises-2,  and  that  those  locations  contain  evidence  relating  to  the  Sterling  taxi  medallion 
transaction,  Cohen’s  assets,  Cohen’s  consulting  work  for  Essential  Consultants  EEC,  and  his 
payment  to  Clifford.  Additionally,  there  is  probable  cause  to  believe  that  Subject  Premises-3 
contains  evidence  of  Cohen’s  assets  and  his  payment  to  Clifford.  Finally,  there  is  probable  cause 
to  believe  that  Subject  Premises-4,  in  which  Cohen  is  temporarily  residing,  contains  electronic 
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devices,  including  Subject  Device- 1  and  Subject  Device-2,  which,  in  turn,  contain  evidence  of  the 
Subject  Offenses,  such  as  evidence  relating  to  the  Sterling  taxi  medallion  transaction,  Cohen’s 
assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his  payment  to  Clifford. 

46.  First,  there  is  probable  cause  to  believe  that  Cohen  lives  and  operates  his  businesses, 
at  least  in  part,  at  Subject  Premises-1 .  Specifically,  from  my  review  of  property  records,  I  know 
that  Michael  Cohen  and  Laura  Cohen  own  (in  trust)  Subject  Premises-1.  From  my  review  of 

Cohen’s  tax-retumsy-I  know-he  lists-his-primary-residenee  as  SubjecLPremises-l—Additionallys- 

from  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
routinely  refers  to  Subject  Premises-1  as  his  home.  For  example,  on  or  about  September  28,  2017 
and  October  6,  2017,  Cohen  emailed  individuals  that  his  home  address  is  the  address  for  Subject 
Premises-1.  I  also  know  from  my  review  of  emails  that  Cohen  receives  package  delivery 
notifications  that  list  Cohen’s  address  as  the  address  for  Subject  Premises-1.  Cohen  has  also 
provided  the  address  of  Subject  Premises-1  as  the  address  for  Essential  Consultants  and  Michael 
D.  Cohen  &  Associates,  P.C.  For  example,  the  certificates  of  incorporation  and  account  opening 
documents  at  First  Republic  for  both  entities  list  their  addresses  as  the  address  for  Subject 
Premises-1.  See  supra  18(b),  18(d).  The  consulting  agreement  between  Essential  Consultants 
and  AT&T  also  indicated  the  address  for  Essential  Consultants  is  the  address  for  Subject  Premises- 
1.  See  supra\  \9(c). 

47.  There  is  also  probable  cause  to  believe  that  Subject  Premises-1  is  likely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  following: 
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a.  According  to  records  maintained  by  Sterling,  the  address  for  all  of  Cohen’s  taxi 
medallion  LLCs  is  the  address  for  Subject  Premises-1.  See  supra  Tf  16(c).  Additionally,  the 
medallion  loan  documents  indicate  that  any  mailings  related  to  the  loans  should  be  sent  to  Subject 
Premises-1 .  See  id.  Based  on  my  training  and  experience,  as  well  as  my  review  of  public  sources, 
I  know  that  individuals  keep  records  of  properties  and  assets  in  which  they  have  ownership 
interests.  Accordingly,  I  submit  that  Subject  Premises-1  likely  contains  evidence  of  Cohen’s 

ownership-op^the  taxi  medallion-LLCSj^the  revenue- that  those  medaUions-generate,-and- the 

transaction  with  Sterling  in  2014  to  re-fmance  the  medallion  loans  that  were  then  with  Capital  One 
Bank. 

b.  From  my  review  of  records  maintained  by  Sterling,  I  also  know  that  Sterling 
addressed  documents  relating  to  the  ||^^^^^^|transaction  and  Cohen’s  attempts  to  modify  the 
terms  of  the  medallion  loans  to  Subject  Premises-1.  For  instance.  Sterling  addressed  the 
transaction  term  sheet,  see  supra  Tf  16(1),  and  its  demand  letter  and  notice  of  default,  see  supra  ^ 
16(q),  to  Subject  Premises-1.  Accordingly,  Subject  Premises-1  likely  contains  evidence 
concerning  the  ^^^^^^ransaction  and  Cohen’s  negotiations  with  Sterling.  Some  of  those 
records — such  as  records  relating  to  a  payment  from  Cohen  to^^^^^^|-were  concealed  from 
Sterling  and  cannot  be  obtained  via  subpoena  to  Sterling.  Additionally,  even  where  documents 
were  sent  to  Cohen  by  Sterling  (and  therefore  are  available  from  Sterling  via  subpoena),  the  fact 
that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to  Cohen’s  possession  or  Icnowledge 
of  the  documents. 

c.  From  my  review  of  records  maintamed  by  First  Republic,  I  know  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  addresses  for  the  Essential  Consultants 
Account  and  MDC&A  Account.  See  supra  TfH  18(b),  18(e).  Accordingly,  it  is  likely  that  Subject 
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Premises-1  contains  records  relating  to  the  Essential  Consultants  Account  and  MDC&A  Account, 
including,  among  other  things,  account  opening  documents,  bank  statements,  documents  provided 
as  part  of  the  know-your-customer  process,  any  notes  made  by  Cohen  when  he  was  opening  the 
accounts,  wire  transfer  records,  and  canceled  checks.  Even  where  these  records  can  be  obtained 
from  First  Republic,  the  fact  that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to, 
among  other  things,  Cohen’s  ownership  of  the  accounts,  or  his  knowledge  of  transactions  or  the 
existence  of  funds  in  accounts. 

d.  Based  on  my  review  of  records  maintained  by  Capital  One  Bank,  TD  Bank,  Morgan 
Stanley,  City  National  Bank,  Signature  Bank,  and  Bethpage  Credit  Union,  I  loiow  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  for  his  accounts  at  each  of  these 
financial  institutions.  Accordingly,  it  is  likely  that  Subject  Premises-1  contains  records  relating  to 
these  accounts,  including,  among  other  things,  bank  statements  that  list  account  balances.  The 
existence  of  these  records  in  Subject  Premises-1  will  be  relevant  to,  among  other  things,  Cohen  s 
ownership  of  the  accounts  and  his  knowledge  of  the  balances  in  these  accounts. 

e.  Additionally,  Cohen  may  have  records  of  other  bank  accounts  or  assets  that  were 
not  disclosed  to  Sterling  and  are  not  presently  known  by  law  enforcement.  For  example,  as 
described  above,  Cohen  has  received  interest  income  since  2015  that  he  has  not  disclosed  to 
Sterling  or  paid  taxes  on.  Also,  on  Cohen’s  August  2014  Financial  Statement,  see  supra  ^  16(e), 
he  disclosed  $10,000,000  in  “investments  in  overseas  entities.”^®  The  value  of  these  mvestments 
was  omitted  from  subsequent  financial  statements.  However,  for  the  reasons  outlined  above,  there 
is  probable  cause  to  believe  that  Cohen  omitted  the  value  of  those  investments  from  his  2017 

Based  on  my  participation  in  an  interview  with  Sterling  Employee-3, 1  have  learned  that 
Cohen  told  Sterling  Employee-3  that  the  reference  to  “investments  in  overseas  entities”mn  his 
2014  Financial  Statement  was  to  serve  merely  as  a  “placeholder”  for  potential  future  mvestmen  s. 
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financial  statements  in  order  to  understate  his  assets.  As  Subject  Premises- 1  is  Cohen’s  primary 
residence  and  he  uses  Subject  Premises- 1  as  the  mailing  address  for  bank  records,  there  is  probable 
cause  to  believe  that  account  statements  for  unknown  bank  accounts  or  assets  concealed  from 

Sterling  are  likely  to  be  found  in  Subject  Premises- 1. 

f.  Based  on  my  review  of  records  maintained,  by  AT&T  and  produced  pursuant  to  the 

Cohen  Email  Warrants,  I  know  that  the  address  Cohen  provided  to  AT&T  for  Essential  Consultants 
is  the  addresslor  Subject  Premises- 1.  '5?^Tw]?f^rr9‘(c)”Therefore,  there^^ 
believe  that  Subject  Premises-1  will  contain  evidence  concerning  die  operation  of  Essential 
Consultants  or  money  that  Cohen  received,  through  Essential  Consultants,  firom  AT&T. 
Additionally,  because  Cohen  used  the  address  for  Subject  Premises-1  for  at  least  one  consulting 
arrangement  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  may  contain  records  of  other  consulting  arrangements  diat  Cohen,  through  Essential 

Consultants,  has  with  other  individuals  or  entities. 

g.  Based  on  my  review  of  records  maintained  by  Getzel’ s  accounting  firm,  and  emails 

produced  pursuant  to  the  Cohen  Email  Warrants,  I  have  learned  that  Getzel’s  accountmg  firm  sent 
documents  to  Subject  Premises-1  and  used  the  address  for  Subject  Premises-1  as  the  address  listed 
on  Cohen’s  personal  and  corporate  tax  returns.  See  supra  ^  16(n).  For  instance,  on  or  about 
October  6,  2017,  an  employee  at  Getzel’s  accounting  firm  emailed  Cohen  that  she  had  sent 
Cohen’s  September  2017  Financial  Statement  by  FedEx  to  Cohen’s  attention.  Accordingly, 

Cohen’s  tax  records  are  likely  to  be  found  in  Subject  Premises-1. 

h.  Based  on  my  review  of  bank  records  and  publicly-available  documents,  I  loiow  that 

Cohen  used  $130,000  from  a  home  equity  line  of  credit  on  Subject  Premises-1  to  pay  Clifford.  I 
also  know  that  on  the  settlement  and  nondisclosure  agreement  between  “Peggy  Peterson”  and  “EC, 
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LLC,”  the  address  for  Essential  Consultants  is  Subject  Premises-1.  Accordingly,  Subject 
Premises- 1  is  lilcely  to  contain  evidence  of  the  Campaign  Finance  Offenses,  including  settlement 
and  nondisclosure  agreements,  payment  records,  written  and  email  correspondence,  and  records 
pertaining  to  the  home  equity  line  of  credit. 

i.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants  and 
iCloud  Warrant,  I  know  that  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini,  and  a 
■MacBookrProto^access-hisiCloudaccountT-Basedon  my  review  of  location  records  pro  vided-by- 
Apple  pursuant  to  the  iCloud  Warrant,  I  know  that  electronic  devices  linked  to  Cohen’s  iCloud 
account  were  used  at  Subject  Premises-1  to,  among  other  things,  place  telephone  calls  and  backup 
files  to  Cohen’s  iCloud  account.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  contains  electronic  devices,  including  certain  Apple  products,  that  for  reasons 
discussed  below  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

j.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I 
understand  that  Subject  Premises-1  recently  sustained  water  damage  to  certain  parts  of  the 
premises,  and  that  Cohen  has  engaged  contractors  to  perform  certain  remediation  work  on  the 
premises.  In  addition,  as  set  forth  above,  I  believe  that  Cohen  and  his  family  are  temporarily 
residing  at  Subject  Premises-4  in  the  Loew’s  Regency  Hotel,  which  is  approximately  two  blocks 
from  Subject  Premises-1.  However,  based  on  my  review  of  a  work  order  sent  to  Cohen’s  email 
by  a  contractor,  I  understand  that  the  first  phase  of  the  work  order  called  for  the  contractor  to  “Pack 
&  Remove  all  items  &  furnishings  in  Living  Room,  Kitchen,  Sons  Room  &  Dining  Room”  and 
store  them  off-site.  In  addition,  based  on  my  review  of  drawings  sent  to  Cohen  by  the  contractor, 
it  appears  that  the  work  is  primarily  being  done  in  these  rooms.  Thus,  1  believe  that  the 
construction  -  to  the  extent  it  is  still  ongoing  -  would  not  necessarily  have  caused  Cohen  to  move 
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all  documents  or  evidence  responsive  to  the  warrant  out  of  Subject  Premises- 1,  because  it  does  not 
appear  that  work  is  being  done  to  the  portion  of  Subject  Premises-1,  such  as  a  home  office  or 
Cohen’s  own  room,  where  such  documents  or  evidence  would  most  likely  be  found.^^ 

48.  Second,  there  is  probable  cause  to  believe  that  Cohen  uses  Subject  Premises-2  as 
office  space,  and  also  that  Subject  Premises-2  contains  certain  electronic  devices.  Specifically, 
from  my  review  of  the  “strategic  alliance  agreement”  between  Squire  Patton  Boggs  and  Cohen, 
-and-my^review  of  the  press-release  on- Squire  Patton-Boggs’s-website,  I  know-that-CohenJhasan-^ 
office  at  Subject  Premises-2.  See  supra  HTf  18(d),  19(e).  Indeed,  I  have  learned  that  pursuant  to 
Cohen’s  agreement  with  the  law  firm,  he  has  “dedicated  and  segregated  office  space”  in  Squire 
Patton  Boggs’s  offices  on  the  23rd  floor  of  30  Rockefeller  Plaza,  and  that  the  space  is  “physically 
separate”  from  the  firm’s  offices  and  has  “locked  doors  and  its  own  locked  file  cabinets.”  See 
supra  Tf  19(e).  Additionally,  I  know  that  under  the  terms  of  the  agreement,  Cohen  agreed  to 
“arrange  for  [his]  own  computer  server  system  that  is  not  connected  to  [Squire  Patton  Boggs’s] 
computer  network  system.”  I  know  from  my  participation  in  an  interview  with  Getzel,  who  met 
Cohen  at  Subject  Premises-2  in  2017,  that  Subject  Premises-2  is  an  office  with  a  door,  it  appears 
to  be  used  only  by  Cohen,  and  it  contains,  among  other  things,  a  computer  and  paper  files. 
According  to  Getzel,  when  Getzel  saw  Cohen  at  Subject  Premises-2,  he  had  two  cellular 
telephones  in  Subject  Premises-2.  I  also  Icnow  from  my  review  of  emails  produced  pursuant  to  the 
Cohen  Email  Warrants  that  Cohen  uses  the  address  for  Subject  Premises-2  in  the  signature  block 

As  noted  below,  based  on  my  training  and  experience,  I  believe  that  individuals  who  travel  or 
stay  in  hotels  for  short-term  periods  commonly  bring  some  items  with  them,  such  as  portable 
electronic  devices  or  sensitive  items,  meaning  that  Cohen  has  likely  taken  some  evidence  from 
Subject  Premises-1  to  Subject  Premises-4.  Nevertheless,  given  the  temporary  nature  of  Cohen’s 
stay  at  Subject  Premises-4  and  the  scope  of  the  work  being  done  at  Subject  Premises-1, 1  believe 
it  is  unlikely  that  Cohen  has  taken  all  evidence  that  would  be  subject  to  seizure  out  of  Subject 
Premises-1. 
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on  his  emails.  Based  on  my  review  of  notes  of  a  call  between  Cohen  and  First  Republic  Employee- 
2  (which  notes  were  taken  by  another  First  Republic  employee,  who  was  participating  in  the  call 
and  taking  notes),  I  loiow  that,  on  or  about  November  15,  2017,  Cohen  told  First  Republic 
Employee-2  that  he  had  a  new  office  at  30  Rock.  Moreover,  I  Icnow  from  an  article  in  Vanity  Fair 
published  on  or  about  February  14, 2018,  that  Cohen  was  interviewed  by  the  magazine  in  Subject 
Premises-2  in  or  about  F ebruary  2018. 

_ 49.  There  is  also  probable  cause  to  believe  that  Subject  Premises-2  is  likelyjl:o  contain„ 

instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
'  emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  following: 

a.  According  to  records  maintained  by  Sterling,  when  Cohen  was  emailing  with 
Sterling  Employee-3  in  2018  about  a  modification  to  his  existing  loan  from  Sterling,  Cohen  listed 
his  address  in  his  email  as  the  address  for  Subject  Premises-2.  See  supra  Tf  16(t),  16(u). 
Accordingly,  Subject  Premises-2  likely  contains  evidence  concerning  Cohen’s  loan  modification 
negotiations  with  Sterling. 

b.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  the  address  Cohen  provided  to  KAI  and  BTA  for  Essential  Consultants  is  the  address 
for  Subject  Premises-2.  See  supra  TITj  19(a),  19(b).  Therefore,  there  is  probable  cause  to  believe 
that  Subject  Premises-2  will  contain  evidence  concerning  the  operation  of  Essential  Consultants 
or  money  that  Cohen  received,  through  Essential  Consultants,  from  KAI  and  BTA,  among  other 
entities  with  which  Cohen  had  a  consulting  arrangernent.  Additionally,  based  on  my  review  of 
emails  sent  in  2018  that  were  obtained  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
continues  to  enter  into  consulting  arrangements  through  Essential  Consultants,  and  agreements 
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relating  to  those  arrangements  indicate  that  Essential  Consultants  is  located  at  Subject  Premises- 
2.  Additionally,  because  Cohen  used  the  address  for  Subject  Premises-2  for  multiple  consulting 
arrangements  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-2  may  contain  records  of  other  unknown  consulting  arrangements  that  Cohen  has  with 
other  individuals  or  entities. 

c.  Based  on  my  review  of  records  maintained  by  GetzeP  s  accounting  firm,  and  emails 
produced  pursu^o  the  CoheiTErSaTi  mrlaiiti^Ts-^lRslEy^^ 

Getzel,  I  have  learned  that  Getzel  visited  Subject  Premises-2  to  meet  with  Cohen  about  his  taxes. 
See  supra  20(a).  At  that  meeting,  Getzel  discussed  with  Cohen  whether  Cohen  should  disclose 
Essential  Consultants  on  his  personal  financial  statement  to  banks.  According,  there  is  probable 
cause  to  believe  that  Subject  Premises-2  will  contain  evidence  relating  to  Cohen’s  taxes,  or  notes 
of  his  conversation  with  Getzel.  Moreover,  the  fact  that  Cohen  used  Subject  Premises-2  for  a 
meeting  regarding  his  personal  financial  matters  provides  probable  cause  to  believe  that  documents 
and  information  regarding  his  finances  will  be  found  in  Subject  Premises-2. 

d.  Based  on  my  participation  in  an  interview  with  Getzel,  I  know  that  Cohen  maintains 
a  computer  in  Subject  Premises-2.  From  my  review  of  IP  data  produced  pursuant  to  a  subpoena 
and  pen  register  to  Google,  it  appears  that  Cohen  is  logging  into  his  Gmail  account  fi:om  Subject 
Premises-2.  Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-2  contains 
elecU-onic  devices,  that  for  reasons  discussed  below  are  likely  to  contain  evidence  of  the  Subject 

.  Offenses. 

e.  Based  upon  my  training  and  experience,  I  have  learned  that  individuals  who 
maintain  businesses  lypically  keep  records  relating  to  the  business— such  as  contracts  with  clients 
and  records  of  payments — ^at  the  business’  identified  location.  I  am  not  aware  of  any  addresses 
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associated  with  Essential  Consultants  other  than  Subject  Premises-1  and  Subject  Premises-2. 
Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-1  and  Subjeet  Premises-2 

will  contain  business  records  for  Essential  Consultants. 

50.  Third,  there  is  probable  cause  to  believe  that  Subject  Premises-3  is  likely  to  contain 

instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  In  particular. 

a.  As  noted  above,  Cohen  has  two  bank  accounts  at  TD  Bank.  In  or  about  November 
^Ol^as  Cohen  was  receiving  ^bstantffllncome  from  consulting  wofk=whTeh  he  didmotdiselose— 
to  Sterling— Cohen  opened  the  safety  deposit  box  at  TD  Bank,  which  is  Subject  Premises-3.  In 
light  of  the  aforementioned  evidence  that  Cohen  conceals  assets,  including  assets  at  TD  Bank, 
there  is  probable  eause  to  believe  that  Subject  Premises-3  contains  financial  assets,  objeets  of  value 
and/or  documents  relating  to  such  assets  or  objects  of  value  that  Cohen  likely  did  not  diselose  to 
Sterling.  Indeed,  based  on  my  training  and  experience,  I  am  aware  that  people  often  coneeal 
valuable  items  in  safety  deposit  boxes.  Accordingly,  there  is  probable  cause  to  believe  that  Subjeet 

Premises-3  will  contain  evidence  of  the  Bank  Fraud  Offenses. 

b.  In  addition,  based  on  my  review  of  records  produced  by  TD  Bank,  I  know  that 
Cohen  has  accessed  the  vault  in  which  Subject  Premises-3  is  stored  on  two  occasions.  The  first 
sueh  occasion  was  on  November  10,2017.  Cohen  signed  into  the  vault  at  approximately  5:35  and 

out  of  vault  at  approximately  5:39  on  that  date.^^  g^sed  on  my  review  of  toll  records,  I  know  that 
Cohen’s  first  call  after  he  signed  out  of  the  safety  deposit  box  -  approximately  45  minutes  later  - 
was  to  Keith  Davidson.  Specifically,  at  6:25  p.m.  Cohen  called  Davidson  and  they  spoke  for  less 
than  a  minute;  three  minutes  later,  Davidson  called  Cohen  back  and  they  spoke  for  approximately 

52  The  entry  in  the  banlc’s  log  book  does  not  specify  whether  this  is  A,M.  or  P.M.  however,  I  infer 
that  it  is  P.M.,  because  it  is  unlikely  that  the  bank  would  have  been  open  at  5:35  and  5:39  a.m. 
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22  minutes.  The  second  such  occasion  was  on  February  2,  2018,  which  is  during  the  time  period 
numerous  media  reports  about  Cohen’s  payment  to  Clifford  were  being  published,  and  is  one  day 
after  it  appears  that  Cohen’s  family  moved  into  Subject  Premises-4,  as  set  forth  above.  The  tinung 
of  Cohen’ s  two  visits  to  the  vault  -  one  shortly  before  a  call  to  Keith  Davidson  and  the  other  around 
the  time  that  Cohen  came  under  media  scrutiny  in  connection  with  the  payment  to  Davidson’s 
client  -  gives  rise  to  probable  cause  to  believe  that  Subject  Premises-3  will  contain  evidence  of  the 
Campaign  Finance  Offenses,  such  as  docurnehtTrbleroiif  to 

Davidson  and  the  payment  to  Clifford,  including  documents  or  evidence  that  Cohen  did  not  want 

to  leave  in  his  apartment  where  construction  workers  would  be  present.^^ 

5 1 .  Based  on  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email  Warrants  and 
cellphone  location  information,  I  believe  that  Cohen  is  temporarily  residing  in  Subject  Premises- 
4.  See  supra  3(d).  There  is  also  probable  cause  to  believe  that  Subject  Premises-4  contains 

instrumentalities  and  evidence  of  the  Subject  Offenses,  including,  the  following: 

a.  As  described  above,  it  appears  that  Cohen  moved  to  Subject  Premises-4  on  or  about 
February  1,  2018,  at  which  time  numerous  media  reports  about  Cohen’s  involvement  in  the 
payment  to  Clifford  were  being  published.  supra  3(d).  During  this  time  same  period, 
Cohen  was  frequently  corresponding  with  the  media  and  sent  himself  and  others  statements  about 
his  involvement  in  the  payment  to  Clifford.  supra  42(a)-(c).  Thus,  there  is  probable  cause 
that  Cohen  took  at  least  some  documents  and  evidence  relating  to  the  Clifford  payment  with  him 
to  Subject  Premises-4,  in  order  to  reference  and  consult  them  in  connection  with  these  statements. 


33  As  noted  above.  Subject  Premises-3  is  approximately  five  inches  by  ten  inches.  Accordmgly, 
do  not  believe  that  it  would  fit  a  large  volume  of  hard  copy  documents;  however,  a  small  number 
of  hard-copy  documents,  or  a  large  volume  of  documents  contained  on  a  flash  drive  or  othei 
portable  storage  device,  would  fit  in  Subject  Premises-3. 
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b.  As  described  above,  at  the  time  Cohen  moved  to  Subject  Premises-4,  he  was  also 
in  the  midst  of  ongoing  negotiations  with  Sterling  regarding  the  refinancing  of  his  medallion  debts. 
For  example,  on  January  3  0, 20 1 8 ,  Cohen  had  a  lengthy  phone  call  with  Sterling  Employee-3  about 
his  finances  and  the  proposed  restructuring,  and  on  February  1,  2018,  Cohen  sent  an  email  to 
Sterling  Employee-3  claiming  that  he  did  not  have  more  than  $1.25  million  in  cash.  See  supra 

1 6(u).  Thus,  there  is  probable  cause  that  Cohen  took  at  least  some  documents  and  evidence  relating 
to  his  ongoing  negotiations  with  Sterling-with  him  to  Subj  ect  Premises-4rin  order  to  referenee  and- 
consult  them  in  connection  with  these  negotiations. 

c.  As  described  above,  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini, 
and  a  MacBook  Pro  to  access  his  iCloud  account,  and  these  electronic  devices  linked  to  Cohen’s 
iCloud  account  were  used  at  Subject  Premises-1  -  Cohens’  permanent  residence  -  to  place 
telephone  calls  and  backup  files  to  Cohen’s  iCloud  account.  See  supra  47(i).  Although  Cohen’s 
stay  at  Subject  Premises-4  is  temporary,  based  on  my  training  and  experience  I  know  that 
individuals  who  travel  or  stay  in  hotels  for  short-term  periods  commonly  bring  portable  electronic 
devices  with  them,  such  as  cellular  phones,  tablets,  or  laptops.  Accordingly,  there  is  probable 
cause  to  believe  that  Subject  Premises-4,  where  Cohen  currently  appears  to  be  residing,  contains 
electronic  devices,  including  Subject  Device- 1,  Subject  Device-2,  and/or  certain  Apple  pi'oducts, 
that  for  the  reasons  discussed  herein  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

d.  Moreover,  as  set  forth  above,  based  on  cellphone  location  information  I  know  that 
Subject  Device-1  and  Subject  Device-2  were  in  the  vicinity  of  Subject  Premises-4  as  recently  as 
this  morning  (April  8,  2018).  As  set  forth  above,  there  is  probable  cause  to  believe  that  Cohen 
used  the  Subject  Devices  in  furtherance  of  the  Subject  Offenses,  including  to  communicate  with 
Sterling  employees  regarding  the  medallion  transaction,  with  First  Republic  employees  regarding 
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the  Essential  Consultants  Account,  with  his  accountant  regarding  his  finances,  and  with 
individuals,  such  as  Davidson,  Howard  and  Pecker,  involved  in  the  $130,000  payment  to  Clifford. 

52.  Although  Cohen  appears  to  be  residing  currently  in  Subject  Premises-4,  it  is 
unlcnown  whether  Cohen  will  be  physically  present  within  Subject  Premises-4  at  the  moment  the 
warrant  sought  herein  are  executed.  If  Cohen  is  within  Subject  Premises-4  at  that  moment.  Subject 
Device-1  and  Subject  Device-2  -  his  cellphones  -  will  likely  also  be  within  Subject  Premises-4. 

lfCc)heinsn()fwMiiirsnbjectPremis^es-4'atfhatmomenf,AhedwiceTwd^ 

wherever  he  is  located  (which,  based  on  location  data  for  Subject  Device- 1  and  Subject  Device-2 
as  recently  as  today,  is  likely  to  be  in  the  Southern  District  of  New  York).  As  such,  this  warrant 
seeks  separate  authority  to  seize  Subject  Device-1  and  Subject  Device-2,  in  the  event  that  those 
devices  are  not  located  within  Subject  Premises-4  (or  another  Subject  Premises)  at  the  moment  the 
warrants  sought  herein  are  executed. 

D.  Probable  Cause  Justifying  Search  of  ESI 

53.  Based  on  the  foregoing,  there  is  probable  cause  to  believe  that  Subject  Premises-1, 

Subject  Premises-2  and  Subject  Premises-4  contain  electronic  devices  that  are  likely  to  contain 
evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses  (and,  as  set  forth  above,  that  Subject 
Device-1  and  Subject  Device-2  are  themselves  electronic  devices  that  are  likely  to  contam 
evidence  of  the  Subject  Offenses).  Specifically,  based  on  my  review  of  information  produced 
pursuant  to  the  Cohen  Email  Warrants,  the  iCloud  Warrant,  and  subpoenas,  as  well  as  pen  register 
data,  I  submit  that  there  is  probable  cause  that  Subject  Premises-1  contains  an  Apple  iPad  Mini,  a 
MacBook  Pro,  and  has,  at  various  times,  contained  Apple  cellphones;  similarly,  there  is  probable 
cause  that  Subject  Premises-2  contains  a  computer  and  has,  at  various  times,  contained  Apple 
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cellphones.  These  devices  are  likely  to  include  evidence,  fruits,  and  instrumentalities  of  the 
Subject  Offenses  for  the  following  reasons: 

a.  As  described  throughout  this  affidavit,  Cohen  used  email  to  send  and  receive 
communications  related  to  the  Subject  Offenses.  In  particular,  Cohen  used  email  to  send  and 
receive  communications  with  Sterling,  First  Republic,  Getzel,  the  entities  to  which  he  is  providing 
consulting  services,  Davidson,  and  Howard,  among  others.  While  some  of  these  emails  have 

already  heemobtained  via’subpoenas  and  search  warrantsrfknow  from  my  training  and^^experience 

that  individuals  can  and  do  delete  emails  from  their  Internet-based  inboxes  but  retain  copies  of 
those  emails  on  their  hard  drives.  I  also  Imow  that  individuals  often  have  multiple  email  accounts, 
some  of  which  may  not  be  known  to  law  enforcement,  and  as  a  result  electronic  devices  can  be  a 
unique  repository  of  all  emails  relevant  to  certain  Subject  Offenses.  Indeed,  from  my  involvement 
in  this  investigation,  I  know  that  Cohen  had  an  email  account  with  the  Trump  Organization,  but 
the  USAO  and  FBI  have  not  been  able  to  obtain  the  contents  of  that  account  to  date.  Thus,  emails 
relevant  to  the  Subject  Offenses  are  likely  stored  on  electronic  devices  in  Subject  Premises-1, 
Subject  Premises-2  and/or  Subject  Premises-4. 

b.  Additionally,  Subj  ect  Premises- 1 ,  Subj  ect  Premise-2  and  Subj  ect  Premises-4  likely 
contain  electronic  copies  of  documents  relevant  to  the  Subject  Offenses.  Indeed,  I  know  from  my 
training  and  experience  that  individuals  often  retain  copies  of  important  documents  on  their 
computers  or  other  electronic  devices  capable  of  storing  information,  including  cellphones  (such 
as  the  Subject  Devices)  and  tablets.  Here,  there  are  a  number  of  documents  that  Cohen  has  likely 
retained  that  will  be  relevant  to  the  Subject  Offenses.  For  example,  electronic  devices  may  include 
documentation  of  Cohen’s  true  net  worth,  a  listing  of  his  assets,  an  accounting  of  his  available 
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cash,  consulting  agreements  with  third  parties,  and  documentation  of  his  payment  to  Clifford, 

among  other  evidence  of  the  Subject  Offenses. 

c.  Third,  I  know  from  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email 

Warrants  that  Cohen  sent  up  online  banking  with  First  Republic.  Based  on  my  training  and 
experience,  I  know  that  individuals  who  set  up  online  banking  often  receive  electronic  notices 
concerning  financial  transactions  and,  on  occasion,  save  records  of  their  financial  transactions  to 

contain  evidence  of  banking  activity,  including  the  existence  of  bank  accounts  or  assets  that  Cohen 
did  not  disclose  to  Sterling  or  Melrose. 

d.  Fourth,  from  my  review  of  records  produced  by  Apple,  I  know  that  Cohen 
communicates  using  text  message  as  well  as  encrypted  communications  applications.  These 
applications  that  Cohen  has  downloaded  onto  a  phone  include,  but  are  not  limited  to,  WhatsApp, 
Signal,  and  Dust.  I  know  from  my  review  of  toll  records  and  text  messages  that,  in  particular, 
Cohen  communicated  with  Pecker  using  these  encrypted  applications.  Accordingly,  there  is 
probable  cause  to  believe  that  Cohen’s  cellphones  -  the  Subject  Devices  -  will  contain  encrypted 
messages  that  are  not  otherwise  accessible  relating  to  the  Subject  Offenses. 

54.  Based  on  my  training  and  experience,  I  know  that  individuals  who  engage  in 
financial  crimes  commonly  use  computers  to  communicate  with  co-conspirators,  keep  financial 
ledgers,  and  retain  fraudulent  documents.  As  a  result,  they  often  store  data  on  their  computers 
related  to  their  illegal  activity,  which  can  include  logs  of  online  or  cellphone-based  “chats”  with 
co-conspirators;  email  correspondence;  contact  information  of  co-conspirators,  including 
telephone  numbers,  email  addresses,  and  identifiers  for  instant  messaging  and  social  medial 
accounts;  bank  account  numbers;  and/or  records  of  uses  of  funds. 
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55.  Based  on  my  training  and  experience,  I  also  Icnow  that,  where  computers  are  used 
in  furtherance  of  criminal  activity,  evidence  of  the  criminal  activity  can  often  be  found  months  or 

even  years  after  it  occurred.  This  is  typically  true  because: 

•  Electronic  files  can  be  stored  on  a  hard  drive  for  years  at  little  or  no  cost  and.  users  thus 
have  little  incentive  to  delete  data  that  may  be  useful  to  consult  in  the  future. 

.  Even  when  a  user  does  choose  to  delete  data,  the  data  can  often  be  recovered  months 
or  years  later  with  the  appropriate  forensic  tools.  When  a  file  is  “deleted  on  a  home, 
computer  the.  contained  in  the  file  does  not  actually  disappear,  but  instead  remains 
on  the  hard  drive,  in  “slack  space,”  until  it  is  overwritten  by  new  data  that  camot  be 
stored  elsewhere  on  the  computer.  Similarly,  files  that  have  been  viewed  on  &e  Internet 
are  generally  downloaded  into  a  temporary  Internet  directory  or  “cache,  which  is  only 
overwritten  as  the  “cache”  fills  up  and  is  replaced  with  more  recently  viewed  Internet 
pages.  Thus,  the  ability  to  retrieve  ftom  a  hard  drive  or  other  electronic  storage  me  la 
depends  less  on  when  the  file  was  created  or  viewed  than  on  a  particular  user  s 
operating  system,  storage  capacity,  and  computer  habits. 

•  In  the  event  that  a  user  changes  computers,  the  user  will  typically  tramfer  files  from 
the  old  computer  to  the  new  computer,  so  as  not  to  lose  data.  In  addition  users  often 
keep  backups  of  their  data  on  electronic  storage  media  such  as  thumb  dnves,  Has 
memory  cards,  CD-ROMs,  or  portable  hard  drives. 

56.  Based  on  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 
Cohen  engaged  in  the  Subject  Offenses,  and  that  evidence  of  this  criminal  activity  is  likely  to  be 
found  in  the  Subject  Premises,  on  computers  and  electronic  media  found  in  the  Subject  Premises, 
and  on  the  Subject  Devices.  In  particular,  there  is  probable  cause  to  believe  that  the  Subject 
Premises  and  Subject  Devices  will  contain  evidence,  fiuits,  and  instrumentalities  of  violations  of 
the  Subject  Offenses,  as  more  fully  described  in  Section  II  of  Attachments  A,  B,  C,  D,  E  and  F  to 

the  proposed  warrants,  including  the  following: 

a.  Evidence  necessary  to  establish  the  occupancy  or  ownership  of  the  Subject 

Premises,  including  without  limitation,  utility  and  telephone  bills,  mail  envelopes,  addressed 
correspondence,  bank  statements,  identification  documents,  and  keys. 

b.  Evidence  relating  to  Sterling,  Melrose,  and/or  taxi  medallions. 
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c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  tc^^^H^d/or  entities  associated  with  him. 

d.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 

with  Sterling  and/or  Melrose. 

e.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  thTnature  and  purp^e^of  pay^ts~mad^or  to  Es^i^^^ 

of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

f.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

g.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 

entities,  including  tax  returns,  personal  financial  statements,  and  bank  records. 

h.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and^^^^^H  payments  b^^Hto  Cohen. 

i.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  then- 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 

and  any  communications  related  to  such  agreements. 

j.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 

agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 
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k.  Evidence  of  communications  involving  Michael  Cohen,  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

l.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordmation  or 
consultation  with  the  Trump  Campaign. 

m.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  thc~A^cess  Holl^o^  t^'  and  other  potentiarsources  ofTtegative 

publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

n.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 

payment  to  Clifford  or  others  in  connection  with  the  election. 

o.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 

contribution  reporting  requirements,  and  campaign  contribution  limits. 

p.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 

relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

q.  Communications,  records,  documents,  and  other  files  reflecting  false 

representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 

i 

tacial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  puntosc  or  nature  of  any 

financial  transactions  involving  that  financial  institution, 

r.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

HI.  Procedures  for  Searching  ESI 
A.  Execution  of  Warrant  for  ESI 

57.  Federal  Rule  of  Criminal  Procedure  41(e)(2)(B)  provides  that  a  warrant  to  search 

for  and  seize  property  “may  authorize  the  seizure  of  electronie  storage  media  or  the  seizure  or 
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copying  of  electronically  stored  information  ...  for  later  review.”  Consistent  with  Rule  41,  this 
application  requests  authorization  to  seize  any  computer  devices  and  storage  media  and  transport 
them  to  an  appropriate  law  enforcement  facility  for  review.  This  is  typically  necessary  for  a  number 
of  reasons: 


•  First,  the  volume  of  data  on  computer  devices  and  storage  media  is  often  impractical 
for  law  enforcement  personnel  to  review  in  its  entirety  at  the  search  location. 

•  Second,  because  computer  data  is  particularly  vulnerable  to  inadvertent  or  intentional 

rnodM^tibrrdrliestructim7“coffiputertevice's  are^rdeally"“examined  in“a~con^ 

environment,  such  as  a  law  enforcement  laboratory,  where  trained  personnel,  using 
specialized  software,  can  make  a  forensic  copy  of  the  storage  media  that  can  be 
,  subsequently  reviewed  in  a  manner  that  does  not  change  the  underlying  data. 

•  Third,  there  are  so  many  types  of  computer  hardware  and  software  in  use  today  that  it 
can  be  impossible  to  bring  to  the  search  site  all  of  the  necessary  technical  manuals  and 
specialized  personnel  and  equipment  potentially  required  to  safely  access  the 
underlying  computer  data. 

•  Fourth,  many  factors  can  complicate  and  prolong  recovery  of  data  ftom  a  computer 
device,  including  the  increasingly  common  use  of  passwords,  encryption,  or  other 
features  or  configurations  designed  to  protect  or  conceal  data  on  the  computer,  which 
often  take  considerable  time  and  resources  for  forensic  personnel  to  detect  and  resolve. 

58.  As  discussed  herein,  Squire  Patton  Boggs  is  a  functioning  law  firm  that  conducts 
legitimate  business  unrelated  to  Cohen’s  commission  of  the  Subject  Offenses.  Subject  Premises- 
2  is  an  office  located  inside  of  Squire  Patton  Boggs’s  New  York  office.  In  order  to  execute  the 
warrant  in  the  most  reasonable  fashion,  law  enforcement  personnel  will  attempt  to  investigate  on 
the  scene  of  what  computers  or  storage  media,  if  any,  must  be  seized  or  copied,  and  what  computers 
or  storage  media  need  not  be  seized  or  copied.  Law  enforcement  personnel  will  speak  with  Squire 
Patton  Boggs  personnel  on  the  scene  as  may  be  appropriate  to  determine  which  files  and  electronic 
devices  within  Subject  Premises-2  belong  to  or  were  used  by  Cohen.  While,  based  on  the 
foregoing,  it  does  not  appear  that  Cohen  shared  electronic  devices  or  a  server  with  Squire  Patton 
Boggs,  where  appropriate,  law  enforcement  personnel  will  copy  data,  rather  than  physically  seize 
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computers,  to  reduce  the  extent  of  any  disruption  of  Squire  Patton  Boggs’s  operations.  If.  after 
inspecting  the  seized  computers  off-site,  it  is  detennined  that  some  or  all  of  this  equipment  is  no 
longer  necessary  to  retrieve  and  preserve  the  evidence,  the  Government  will  return  it. 

59,  Additionally,  because  Cohen  is  an  attorney,  and  claims  to  serve  as  a  personal 
attorney  for  Trump,  the  review  of  evidence  seized  from  the  Subject  Premises  and  Subject  Devices 
will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law  ertTorcement 

prJsi^^vS^d  in  ieln^istiiatb^  teihdlSPtSHSyJ-^ 

in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable  privilege.  When 
appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate  and  apart  from 
the  Investigative  team,  in  order  to  review  potentialiy  privileged  communications  and  determine 
which  communications  to  release  to  the  investigation  and  prosecution  team. 

B.  Accessing  ESI  on  the  Subject  Devices 

60.  As  described  above,  the  Subject  Devices  are  both  Apple  brand  devices. 

61.  I  know  from  my  training  and  experience,  as  well  as  from  information  found  m 
publicly  available  materials  including  those  published  by  Appie,  that  some  models  of  Apple 
devices  such  as  iPhones  and  iPads  offer  their  users  the  ability  to  unlock  the  device  via  the  use  of  a 
fingerprint  or  thumbprint  (collectively,  “fingerprint”)  in  lieu  of  a  numeric  or  alphanumeric 
passcode  or  password.  This  feature  is  called  Touch  ID.  I  also  know  that  the  Apple  iPhone  X  offers 
its  users  the  ability  to  unlock  the  device  via  the  use  of  facial  recognition  (through  inframd  and 
visible  light  scans)  in  lieu  of  a  numeric  or  alphanumeric  passcode  or  password.  This  feature  is 

called  Face  ID. 

62.  If  a  user  enables  Touch  ID  on  a  given  Apple  device,  he  or  she  can  register  up  to  5 
fingerprints  that  can  be  used  to  unlock  that  device.  The  user  can  then  use  any  of  the  registered 
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fingerprints  to  unlock  the  device  by  pressing  the  relevant  finger(s)  to  the  device  s  Touch  ID  sensor, 
which  is  found  in  the  round  button  (often  referred  to  as  the  “home”  button)  found  at  the  bottom 
center  of  the  front  of  the  device.  If  a  user  enables  Face  ID  on  a  given  Apple  device,  he  or  she  can 
unlock  the  device  by  raising  the  iPhone  to  his  or  her  face,  or  tapping  the  screen.  In  my  training 
and  experience,  users  of  Apple  devices  that  offer  Touch  ID  or  Face  ID  often  enable  it  because  it  is 
considered  to  be  a  more  convenient  way  to  unlock  the  device  than  by  entering  a  numeric  or 
Alphanumeric  passcode  or  password, ^s'welFas'a  more  secure  way  to  protectthe  device  s  contents. 

63.  In  some  circumstances,  Touch  ID  or  Face  ID  cannot  be  used  to  unlock  a  device  that 
has  either  security  feature  enabled,  and  a  passcode  or  password  must  be  used  instead.  These 
circumstances  include;  (1)  when  the  device  has  just  been  turned  on  or  restarted,  (2)  when  more 
than  48  hours  has  passed  since  the  last  time  the  device  was  unlocked;  (3)  when  the  passcode  or 
password  has  not  been  entered  in  the  last  6  days,  and  the  device  has  not  been  unlocked  via  Touch 
ID  in  the  last  8  hours  or  the  device  has  not  been  unlocked  via  Face  ID  in  the  last  4  hours;  (4)  the 
device  has  received  a  remote  lock  command;  or  (5)  five  unsuccessful  attempts  to  unlock  the  device 
via  Touch  ID  or  Face  ID  are  made. 

64.  The  passcodes  or  passwords  that  would  unlock  the  Subject  Devices  are  not  known 
to  law  enforcement.  Thus,  it  will  likely  be  necessary  to  press  the  fingers  of  the  user  of  the  Subject 
Devices  to  the  devices’  Touch  ID  sensor,  or  hold  the  Subject  Devices  in  fi-ont  of  the  user’s  face  to 
activate  the  Face  ID  sensor,  in  an  attempt  to  unlock  the  devices  for  the  purpose  of  executing  the 
search  authorized  by  this  warrant.  Attempting  to  unlock  the  relevant  Apple  devices  via  Touch  ID 
with  the  use  of  the  fingerprints  of  the  user,  or  via  Face  ID  by  holding  the  device  in  front  of  the 
user’s  face,  is  necessary  because  the  government  may  not  otherwise  be  able  to  access  the  data 
contained  on  those  devices  for  the  purpose  of  executing  the  search  authorized  by  this  warrant. 
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65.  Based  on  these  facts  and  my  training  and  experience,  it  is  likely  that  Cohen  is  the 
user  of  the  Subject  Devices,  and  thus  that  his  fingerprints  are  among  those  that  are  able  to  unlock 
the  Subject  Devices  via  Touch  ID  or  his  face  is  able  to  unlock  the  Subject  Devices  via  Face  ID. 

66.  Although  I  do  not  loiow  which  of  a  given  user’s  10  fingerprints  is  capable  of 
unlocking  a  particular  device,  based  on  my  training  and  experience  I  know  that  it  is  common  for  a 
user  to  unlock  a  Touch  ID-enabled  Apple  device  via  the  fingerprints  on  thumbs  or  index  fingers. 

In  the  event  thlfla^Tenl^enT^^^^ 

within  the  five  attempts  permitted  by  Touch  ID,  this  will  simply  result  in  the  device  requiring  the 

entry  of  a  password  or  passcode  before  it  can  be  unlocked. 

67.  I  also  know  from  my  training  and  experience,  and  my  review  of  publicly  available 

materials  published  by  Apple  that  Apple  brand  devices,  such  as  the  Subject  Devices,  have  a  feature 
that  allows  a  user  to  erase  the  contents  of  the  device  remotely.  By  logging  into  the  Internet,  th 
user  or  any  other  individual  who  possesses  the  user’s  account  information  can  take  steps  to 
completely  wipe  the  contents  of  the  device,  thereby  destroying  evidence  of  criminal  conduct,  along 
with  any  other  information  on  the  device.  The  only  means  to  prevent  this  action  is  to  disable  the 
device’s  ability  to  connect  to  the  Internet  immediately  upon  seizure,  which  requires  either  access 
to  the  device  itself  to  alter  the  settings,  or  the  use  of  specialized  equipment  that  is  not  consistently 

available  to  law  enforcement  agents  at  every  arrest. 

68.  Due  to  the  foregoing,  I  request  that  the  Court  authorize  law  enforeement  to  press 

the  fingers  (ineluding  thumbs)  of  Cohen  to  the  Toueh  ID  sensors  the  Subject  Devices,  or  hold  the 
Subject  Devices  in  front  of  Cohen’s  face,  for  the  purpose  of  attempting  to  unlock  the  Subject 
Devices  via  Touch  ID  or  Face  ID  in  order  to  search  the  contents  as  authorized  by  this  warrant. 
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C.  Review  of  ESI 

69.  Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation 
of  forensic  image  copies,  law  enforcement  persoimel  (including,  in  addition  to  law  enforcement 
officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and 
related  proceedings,  attorneys  for  Ihe  government,  attorney  support  staff,  agency  personnel 
assisting  the  government  in  this  investigation,  and  outside  technical  experts  under  government 

“control)  will  r^Sw  the  ESI  containldteSISnffSrtSfflbTrie^s^^^ 

70.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques 
to  determine  which  files  or  other  ESI  contain  evidence  or  fruits  of  the  Subject  Offenses.  Such 


techniques  may  include,  for  example: 

.  surveying  directories  or  folders  and  the  individual  fdes  they  contein  (analogous  to 
lookkig  ft  the  outside  of  a  file  cabinet  for  tire  markings  it  contains  and  opening  a  drawer 

believed  to  contain  pertinent  files); 

•  conducting  a  file-by-file  review  by  “opening”  or  reading  the  first  few  “pages”  of  such 
files  ^orL  to  dLmine  their  precise  contents  (analogous  to  performing  a  cursory 
examination  of  each  document  in  a  file  cabinet  to  determine  its  relevance), 

.  “scanning”  storage  areas  to  discover  and  possibly  recover  recently  deleted  data  or 
deliberately  hidden  files;  and 

.  oerforming  electronic  keyword  searches  through  all  electronic  storage  areas  to 
determine  Ae  existence  and  location  of  data  potentially  related  to  the  subject  matter 

the  investigation^'^;  and 

.  reviewing  metadata,  system  information,  configuration  files,  registry  data  and  any 
other  infmmation  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


^evword  searches  aloTe  are  typically  inadequate  to  detect  all  relevant  data.  For  one  thing 

subject  to  seizure  but  that  is  not  captured  by  a  keyword  search  because  the  information  does  not 
contain  the  keywords  being  searched. 
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71 .  Law  enforcement  personnel  will  make  reasonable  efforts  to  restrict  their  search  to 
data  falling  within  the  categories  of  evidence  specified  in  the  warrant.  Depending  on  the 
circumstances,  however,  law  enforcement  personnel  may  need  to  conduct  a  complete  review  of  all 
the  ESI  from  seized  devices  or  storage  media  to  evaluate  its  contents  and  to  locate  all  data 

responsive  to  the  warrant. 

D.  Return  of  ESI 

72.  If  the  Government  d^rmlne7that  the  eldbEbhic  devfc^are  noiongerneeessary- 
to  retrieve  and  preseiwe  the  data,  and  the  devices  themselves  are  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  these  items,  upon  request. 
Computer  data  that  is  encrypted  or  unreadable  will  not  be  returned  unless  law  enforcement 
personnel  have  determined  that  the  data  is  not  (i)  an  instrumentality  of  the  offense,  (ii)  a  fruit  of 
the  criminal  activity,  (iii)  contraband,  (iv)  otherwise  unlawfully  possessed,  or  (v)  evidenee  of  the 

Subjeet  Offenses. 
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IV.  Conclusion  and  Ancillary  Provisions 

73.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachments  A,  B,  C,  D,  E  and  F  to  this  affidavit  and  to  the 
Search  and  Seizure  Warrants. 

74.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  I  respectfully 

request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 
Court  orders“ofherwise:  ^  ^ 


FBI 


Sworn  to  before  me  on 
8th  day  of  April,  2018 


HON.  HENRY  B.  PITMAN 

UNITED  STATES  MAGISTRATE  JUDGE 
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ATTACHMENT  A 

I.  Premises  to  be  Searched— Subject  Premises-1 

The  premises  to  be  searched  (“Subject  Premises-1”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein. 

Apartment^Hocated  inside  the  building  at  502  Park  Avenue  New  York,  New  York 
10022.  X  buildi"ated  at  502  Park  Avenue  is  a  32-floor  brick  residenflal  buildtng.  Subject 
Premises- 1  is  located  on  the^^^^floor  of  the  building. 

IL  Items  to  Be  Seized   


A  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-1  are  evidence,  fruits,  and  inst^en^^^^^ 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  IS® 

ffalse  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  13 
«  fraud),  J  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 

contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  tc^^^^fland/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  that 

indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  ^0^^“ 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  Michael  D.  Cohen  &  As^«^tes, 
or  evidence  of  the  purpose  of  accounts  opened  m  the  name  of  Michael  D.  Cohen  &  Associates. 

f  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  throng 
entities!  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

Evidence  relating  to  agreements,  loans,  and/or  financial  tr^saction^etw^ 

|ind/or  entities  controlled  by  the 


Cohen  andl 
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L  and  any  payments  by 


to  Cohen,  from  January 


1 ,  2012  to  the  present 


h  Evidence  elating  to  payments  to  Stephanie  Clifford,  Karen  MeDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidenee  of  communications  involving  Michael  Cohen,  Donald  Trump  an^or 
agents  or  assoeiates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDouga  ,  or 
payments  to  Stephanie  Clifford  or  Karen  MeDougal. 

i  Rvidence  of  communications  between  Michael  Cohen  and  American  Media  Inc., 
Tafid  Pecte,  and/or  Dylan"  Howard  about  DonSd  Trimp,  the  Trump  Campaip,  Stephame-' 
Clifford,  and/or  Karen  MeDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 

consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  eonnection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  an^or  other  a^omtots 
relating  to  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 

present. 

p.  Communications,  records,  documents,  and  other  files 
representations  to  a  financial  institution  related  to  the  intended  pui-pose  of  an  account  or  loan  at 
tZt  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  aceount;  or  *e 

financial  transactions  involving  that  financial  institution,  from  Janua  y  ,  P 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 


B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subjeet  Premises-1  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  ™ 

set  forth  in  Section  n.A  of  this  Attachment  above,  including,  but  not  limil^  to,  a  MacBoo  , 
aJ^  ote  destop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-1  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 

-eonceming-the-configuration  otthe  seized  or  copied_computer_deviC-esj)r_storage,media, - - 

3.  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 


C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
persoimel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  marldngs  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  malce  reasonable  efforts  to  search  only  for  fhes 
documents  or  other  electronically  stored  information  within  the  categories  identified  m  ec  ion 
TT  A  and  TT  R  of  this  Attachment  However,  law  enforcement  personnel  are  authorized  to  conduc 
a™:;t  -ize’d  devices  or  storage  media  if  necessa^to  evaluate  tts 

contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  te  conducted  pursuit 
to  estabfched  procldures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  prote 
InvttomewdM  o^the,  applicable  privilege.  When  appropriate,  the  procedures  shdl  mclude 

use  of  a  designated ‘T, Iter  team  ”  separate  and  apart  from  the  investigative  team,  in  order  to  address 

potential  privileges. 
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ATTACHMENT  B 


I.  Premises  to  be  Searched— Subject  Premises-2 

The  premises  to  be  searched  (“Subject  Premises-2”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

An  office  belonging  to  or  assigned  to  Michael  Cohen  located  on  te  tor  of  tte 
building  at  30  Rookefeller  Plaza,  New  York,  New  York  10112,  inside  of  the  offices  of  the  'a* 
Squire  Patton  Boggs.  The  building  located  at  30  Rockefeller  Pta  is  a  66-floor  office  buildi  g 
that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller  Plaza. 


n.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-2  are  evidence,  fate,  and  ta^e^Uties 
of  violations  of  1 8  U.S.C.  §§371  (conspiracy  as  it  pertains  to  the 

tffllse  banlc  entries)  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Miehael 

entities  assoeiated  with  him  to  transfer  any  interest  in  taxi  medalhons,  and  my  ^soctated  debts 
“abilities,  to  others,  including  ““““  '”“' 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  ^ 

of  any  work  done  by  Cohen  or  any  other  individuals  m  eonnection  with  Essential  Consultants. 

e  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  Including  any  documente 

that  indicate  the  nature  and  purpose  of  payments  m^e  to  or  Michael  Cohen  & 
or  evidence  of  the  purpose  of  accounts  opened  m  the  name  of  Michael  D.  Cohen  &  Associates. 

f  Evidence  relating  to  Cohen's  net  worth,  available  cash  and  cash  equivalenB 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  persomlly  or  throug 
TntitS!  Muding  tax  returns,  personal  financial  statements,  and  bank  records,  fam  Janua^i  1, 

2013  to  the  present. 

p  Evidence  relating  to  agreements,  loans,  and/or  financial  transaction^etw^ 

^and/or  entities  controlled 
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I  and  any  payments  by  t| 


Ito  Cohen,  from  January 


1, 2012  to  the  present. 

h  Evidence  relating  to  payments  to  Stephanie  Clifford,  Kamn  MeDongal.  or  then 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  T^p  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

_ i  _Evidence  of  communications  between  Michael  Cohen  and  American  M^a  Inc.. 

David  Pecter,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephame 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  die 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  an^or  other  accountants 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  , 

present. 

p  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
thL  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
fmanoial  institution;  the  sonice  of  funds  flowing  into  an  account;  or  *e  ° 

fmancial  transactions  involving  that  financial  institution,  from  January  1. 2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-2  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  any  ^  ^ 
laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone  belongmg  to  Michael  Co  en 
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or  in  his  possession,  portable  hard  drives,  disk  drives,  thumb  drives,  and  personal  digital  assistants 
Heu  of“g  any  such  computer  devices  or  storage  media,  Ms  warrant  also  authortzes  the 

copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-2  also  include. 

1  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computed  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
deviLs,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  mforma  . 

2  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 

devices  or  storagi  media,  including  any  hardware  or  software  manuals  or  other  mformation, 
concejSSgtii^c-fthft^ibnmftheseM^  - 

3  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
conti-ol  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  creation 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  m  addition  to 
enforcement  officer  and  agents,  attorneys  for  the  government,  attorney  support  staff  agency 
n^el  assto  the  government  in  this  investigation,  and  outside  tec^ical  experts  under 
government  control)  are  authorized  to  reviewtheESI  contained  therein  for  mformation  responsive 

to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example. 

.  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  draw 
believed  to  contain  pertinent  files); 

.  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  deteimine 
their  precise  contents; 

•  scanning  storage  areas 
deliberately  hidden  files; 

.  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
Lcurrencfs  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation^  and 

.  reviewing  metadata,  system  information,  configuration  files,  registry  data  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


to  discover  and  possibly  recover  recently  deleted  files  or 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  fhes 
documents  or  other  elech-onically  stored  information  within  the  categories  identified  in  lectio 
II A  and  II B  of  this  Attachment.  However,  law  enforcement  persoime  are  authorized  to  condu 
a  compkte  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably 
anv  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  includ 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 

potential  privileges. 
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ATTACHMENT  C 

I.  Premises  to  be  Searched — Subject  Premises-3 

The  premises  to  be  searched  (“Subject  Premises-3")  are  described  as  follows,  and  include 
all  locked  and  closed  containers  found  therein; 

A  safe  deposit  box  located  inside  theJD  Bank  branch  location  at  500  Park  Avenue,  New 
York,  ftw  York  10019,  marked  as  box  #  ;|  The  safe  deposit  box  is  in  the  name  of  Michael 

Cohen  and  Laura  Cohen. 


n.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premiscs-3  arc 
of  violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  ^  344 

I'fake  hank  entries')  1014  (false  statements  to  a  financial  institution),  1343  (wire  traudj, 

SS  "arf  52  U  S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  c^paign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

1.  Evidence  relating  to  Michael  Cohen's  net  word,,  available  ™d  c^ 

equivalents,  assets,  monthly  and  annual  income,  and  income  sources,  from  January  1, 2013 

present. 

2.  Evidence  relating  to  payments  to  Stephanie  Clifford,  K"en  “cDoug^  or  to 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documenls. 
and  any  communications  related  to  such  agreements. 

3  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal, 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

4  Evidence  of  communications  between  Michael  Cohen  and  /taerican  Media,  to 
David  Lker,  Id/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

5.  Evidence  relating  to  Cohen's  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

6  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 

Trump  CampaSi  tout  the  Acce..  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  m  tire  run  up  to  the  election. 

7.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 
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8.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

9.  Any  portable  electronic  storage  device. 

B.  Search  of  Seized  Electronic  Devices 

Probable  cause  exists  to  search  any  seized  electronio  storage  device  for  the  items  set 


forth  in  Section  II(A)(l)-(8),  above. 
C.  Review  of  ESI 


information  responsive  to  the  warrant. 

In  eonduottag  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  Hie  “directories”  and  the  individual  flies  they  contain  (maiogous  to 
iooktag  tft  the  outside  of  a  Hie  cabinet  for  the  markings  it  contains  and  openmg  a  drawer 
believed  to  contain  pertinent  files); 

.  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 

their  precise  contents; 

.  scanning  storage  areas  to  discover  and  possibly  mcover  recently  deleted  files  or 
deliberately  hidden  files; 

.  DerformingkeywordsearchesthroughallelectronicstorageareastodeterminewhAer 

Lutrenefs  of  language  contained  in  such  storage  areas  exist  that  are  mtunately  related 

to  the  subject  matter  of  the  investigationj  and 

.  reviewing  metadata,  system  information,  configuration  files,  registry  data  and  any 
other  infoi-mation  reflecting  how,  when,  and  by  whom  the  computer  was  used. 

Trw  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  fdes, 

from  seized  devices  if  neeessary  to  evaluate  its  contents  and  to 
locate  all  data  responsive  to  the  warrant. 
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any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  m  order  to  address 

potential  privileges. 
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ATTACHMENT  D 

I.  Premises  to  be  Searched— Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540  '’“'k  Avenue  New  Yort  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street  Subjeet 
Premises-4  is  located  on  the  17th  floor  of  the  hotel. 

n.  Items  to  Be  Seized  _ _ _  _ _ _ _ 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  aie  evidence,  ftuta  and  ii^entalfe 

of  violations  of  18  U.S.C.  §§  371  (conspiracy,  it  Ji  I344 

tfake  bank  entries)  1014  (false  statements  to  a  financial  mstitution),  1343  (wire  haudj,  ana 

frtrand  52  U  S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  eampaign 

contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  ^ohen  and/or 
entities  assoeiated  with  him  to  tr|j^^j^>jj|r|^in  taxi  medallions,  and  any  assooiated  deb 
Smtls,  to  others,  including  tc^j/ll^nd/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  &at 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 

of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultan  . 

e  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  ^  Michael  D.  Cohen  &  ^^at  s, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associat  . 

f  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents 
monthly  and  alutd  income,  income  sources,  and  other  assets,  whether  held  persoMlly  or  through 
entities!  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

„  p„, ■dance  relating  to  agreements,  loans,  and/or  financial  transaction^et^ 

Cohen  “““ 
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1),  and  any  payments  by| 


Ito  Cohen,  from  January 


1,  2012  to  the  present. 


h  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  antVor 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDouga  , 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

_  i  of  communications  between  Michael  Cohen  and  American  Mefa  Jnc 

David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordmation  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  fte 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  nega 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getel  antor  other  a-re<>— . 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  ftom  January  1,  2013  to  the 

present. 

n  Communications,  records,  documents,  and  other  files  reflecting  false 
renresentatfons  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
t^r^drin^^^  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 

Siancial  institution;  the  source  of  funds  flowing  into  an  account;  or  toe 

financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  med!l“at  ly  contain  any  eleetronicall,  stored  information  falling  within  *e  categones 
<?et  forth  in  Section  II A  of  this  Attachment  above,  includmg,  but  not  limited  to,  a  MacBook  P  , 
a^ot";!  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smarQihone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  rev  . 

The  items  to  be  seized  from  Subject  Premises-4  also  include; 

1  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
deviLs,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  formation 

"Concerning  the  ^fi^tidnoffhe^izeft-orcopied-compu^  - 

3  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  ^ 

forensic  image  Lpies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  f 

nersomel  assistine  the  government  in  this  investigation,  and  outside  technical  experts  iin 
go”Lt  iSntrol)  are  Lhorized  to  review  the  ESI  contained  therein  for  information  responsive 

to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example; 

.  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  atthe  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

.  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  deteimine 
their  precise  contents; 

.  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

.  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  ai-e  intimately  related 
to  the  subject  matter  of  the  investigation,  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reason Jle  effete  to  o^^y  ^ 

Hornnients  or  Other  electronically  stored  information  within  the  categories  identified  m  Sections 

n.A  and  Ii’b  of  this  Attachment  However,  law 

a  complete  review  of  all  die  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  *>  P”‘® 

any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  proceduies  shall  mclu 
use  of  a  designated  “filler  team.”  separate  and  apart  from  the  investigative  team,  in  order  to 

address  potential  privileges. 
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ATTACHMENT  E 

I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-1 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-l”)  is 

described  as  follows: 

An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  nnmber^^^^H 
Durine  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 

to  gain  ac^^^Tt^he  contents  of  any  such  dbvice  as  authorized  by  this  warrant. 

H.  Review  ofESI  on  the  Subject  Device 

T  aw  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 

"fte  E^coi 

•  1  cirxfiRTT^r'  88  “^Vl  (^consoiracy  as  it  pertains  to  the  other  Subject  Ott  j?  ^  . 

violations  oi  lo  U.o.C^.  §§  v  P  ^  •  i  •  x*j_,  AxHrp  "Fraiid^  and  1344  (bank 

SrlSirH  u's.at§  3”(1XA)  ^So9(dXl)(A)(l)  (illegal  campaign  contributions) 

(the  “Subject  Offenses”)  described  as  follows; 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  an^^^ 

entities  assoeia.dwithhimtofra^^^in^i—^^ 

liabilities,  to  others,  mcludmg  tc^^^^^^g^na/or  eiiuuc^, 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  EEC,  including 
Essential  Consultants. 

e  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  dpcimients 
Cohen  &  Associates. 
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f  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  ttogh 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  rom  an  y  , 
2013  to  the  present 

„  to  agreement,  loans,  and/or  financial  tans^ion^eto^ 

1  and/or  entities  controlled 

payments  by  tl|^^:o  Cohen,  from  January 

1, 2012  to  the  present 

h  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDongal,  or  then 

agents-or4egaUepresentattes,  jnc!uding_any_nondisclosure  agreements  and  rel^d  documents,  _ 

and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  Tnmp  and/or 
agents  or  aleiociates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDongal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

i  Evidence  of  communications  between  Michael  Cohen  and  /^erican  Media,  Inc 
David  Pecte,  and/or  Dylan  Howard  about  Donald  Trump,  the  Tittmp  Campaign,  Stephame 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 

consultation  with  the  Trump  Campaign* 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  &e 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  nega  i 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

0.  CommunicaUous  with  others,  iucluding  Jeffrey  Get^l  au^or  othe.'  • 

relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 

present. 

p.  Communications,  records,  documents,  and  other  fdes 
representations  to  a  financial  institution  related  to  die  intended  purpose  of 

that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  &e  ° 

financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device- 1  is  no  longer  necessary  to  retrieve 
oreserve  the  data  on  the  device,  and  that  Subject  Device-1  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device-1,  upon 

request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
attorej-dient  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  mclude 
nsl  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  m  order  to  address 

potential  privileges. 
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ATTACHMENT  F 


I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-2 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-2”)  is 
described  as  follows;  _ 

An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number||^^|^^^| 

During  the  execution  of  this  search  warrant,  law  enforcement  persomd  “ 

to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  thia  wairan  . 

IL  Review  of  ESI  on  the  Subj  ect  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcemerit  officers  and  agents, 

violations  of  18  U.S.C.  §§371  (eonspiracy  as  it  I344 

S)  I;;r52  U.S.C.  §§  and  30109(d)(l)(A)(l)  (illegal  campargn  contr.but.ons) 

(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1 ,  201 3  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  an^OT 

entities  associated  withhimtot«^i|gnt^i-^~ 

liabilities,  to  others,  mcludmg  to^^^^^^Hna/or  enuucb 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  ^documents  or 
Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including 
Cohen  &  Associates. 


20 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  203  of  269 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  , 
2013  to  the  present. 

e.  Evidence  relating  to  agreements,  loans,  and/or  financial 
Cohen  entitie^ontrolle^y^^^^^^^^^H 

any  payments  by  Cohen,  from  January 

1,  2012  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 

agents-or4egal  representatives,,inchiding  Miy  jiondisclo_sm^aggements  a^^ 

and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  Americ^  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
pubheily  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountant, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  fi-om  January  1,  2013  to  the 
present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device-2  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-2  is  not  subject  to  seizme  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device-2,  upon 

request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  mclude 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 

potential  privileges. 
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AO  93  (SDNY  Rev,  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

502  Park  Avenue,  Apartment  New  York,  New  York 
10022,  and  any  closed  containers/items  contained 
therein,  See  Attachment  A 


iglAG  2969 


SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authonzed  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  seai'ch 
of  the  following  person  or  propeily  located  in  the  Southern  District  of  _ New  York 


(identify  the  person  or  describe  the  pr^j^^  to  be  searched  and  give  its  location): 

502  Park  Avenue,  Apartment  New  York,  New  York  1 0022,  and  any  closed  containers/items  contained  therein, 
See  Attachment  A 

The  person  or  propeily  to  be  seai'ched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized): 

See  Attachment  A 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  semrh  and  seize  the  person  or 
property,  .  v^V:V(  ' '  c  ^ 


Y OU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 

)  '  (not to  exceed  14  days)  ' 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  nigh/as  1  find  reasonable  cadss  h?is  been 

established.  \ 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  wdiTaiif  and  a  receipt  for  the  properly 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  takeii,' or  leaVe  the  copy  arid  re5ei:^t  at  the 
place  where  die  property  was  taken.  ;  ,  ,  , 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  ruiist  prepare  an 
inventory  as  required  by  law  and  promptly  retrun  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  warrant  and  inventory  should  he  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  thp^^f^bhv^o,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Ofbr  _ days  (not ^cee4  36)1  ’  '  /  ^ 


Date  and  time  issued: 


□until,  the  facts  justi^ihg,  tile  later' specific  date  of 


^'2 ' 

' / ! '  > 


Jndgefy  signadthA 


City  and  state:  New  York  NY 


Henry  3:  Magistrate  Judge 


Prndisdriarne  and  title 

1 1  ^ 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  wairant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventoiy  made  in  the  presence  of : 

Inventoiy  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certiftcation 


I  declai'e  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  wairant 
to  the  Court. 


Date:  _  _ 

Executing  officer  *s  signature 


Printed  name  and  title 
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ATTACHMENT  A 

I.  Premises  to  be  Searched — Subject  Premises-1 

The  premises  to  be  searched  (“Subject  Premises- 1”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therem: 

Apartment^^Hlocated  inside  the  building  at  502  Paiic  Avenue,  New  York,  New  York 
10022.  The  building  located  at  502  Park  Avenue  is  a  32-floor  brick  residential  building.  Subject 
Premises-1  is  located  on  the  ^^^^^|of  the  budding. 

n.  Items  to  Be  Seized 

- Ai — ^Evideuce^rFruits^and  Instrumentalities  of  the  Subject  Offenses - — — - — 

The  items  to  be  seized  from  Subject  Premises-1  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Mekose  Credit  Union,  and/or  taxi 
medallions,  fr:om  January  1 , 201 3  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  ^^^^^^^^^and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agr-eement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  pmpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nafrue  and  purpose  of  payments  made  to  or  fi'om  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  pmpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  retmns,  personal  financial  statements,  and  bank  records,  from  January  1, 
20 1 3  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and^^^^^^^^^^^^^^^^^^Hind/or  controlled  by 
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and  any  payments  Cohen,  fi'om  Januaiy 

1 , 20 1 2  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  inclnding  any  nondisclosm'e  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Tnnnp  Campaign  about  Stephanie  Clifford  or  Kai-en  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Triimp  Campaign,  Stepbanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Tmmp  Campaign,  and  coordination  or 
consultation  with  the  Tramp  Campaign. 

l.  Evidence  of  commumcations  with  Donald  Trump  and/or  agents  or  associates  of  tlie 
Trump  Campaign  about  the  Access  Holl}!V,rood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  ran  up  to  the  election. 

m.  Evidence  relating  to  any  reimbm’sement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  CommuEdcations  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  soui’ce  of  funds  flowing  into  an  account;  or  the  puipose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  fi'om  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  fi’om  Subject  Premises- 1  also  include  any  computer  devices  ami 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.  A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  horn  Subject  Premises-1  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  enciyption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  softwai’e  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizm’e  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  oJHicers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
pei-sonnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  waiTant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  wan'ant,  including,  for  example: 

®  sm've5dng  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  maiidngs  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

e  opening  or  cm’sorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

®  scanning  storage  ar-eas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

*  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occmxences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

e  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  Whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  aU  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pirrsuant 
to  established  procedrrres  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  ‘Trlter-  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

502  Park  Avenue,  Apartment^^jNew  York,  New  York 
10022,  and  any  closed  containers/items  contained 
therein,  See  Attachment  A 


Case  No. 


SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 


(identify  the  person  or  describe  theprovertv  to  be  searched  and  give  its  location)'. 

502  Park  Avenue,  Apartment  ^^flNew  York,  New  York  10022,  and  any  closed  containers/items  contained  therein, 
See  Attachment  A 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized) : 

See  Attachment  A 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 


property. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 

(not  to  exceed  14  days) 

sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt,  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJImtiab 

□  I  find  that  immediate  notification  may  have  an  adverse  result  hsted  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 

searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ , 


Date  and  time  issued:  "7  /^f  f). 

^  ^  (  Judge 's  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  212  of  269 


AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ 

Executing  officer 's  signature 


Printed  name  and  title 
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ATTACHMENT  A 

1.  Premises  to  be  Searched — Subject  Premises-1 

The  premises  to  be  searched  (“Subject  Premises-l”)  are  described  as  follows,  and  include 
elecbonic  devices,  and  all  locked  and  closed  containers  found  therein; 

Apartmenl^^Blocated  inside  the  building  at  502  Park  Avenue,  New  York,  New  York 
10022.  The  building  located  at  502  Park  Avenue  is  a  32-floor  brick  residential  building.  Subject 
Premises-1  is  located  on  the^^^^^^of  the  building. 

n.  Items  to  Be  Seized 

_ A._Evidence,  Fruits,  andTnstrumentalities.  of  the^SuhjectjQffenses _ _ _ 


The  items  to  be  seized  from  Subject  Premises-1  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspbacy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to 


land/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterhng  and/or  Mefrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

Cohen  and 


Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 
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and  any  payments  by 


1,  2012  to  the  present. 


b  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephame  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 


j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
^CltffhrdTand/or  KaremMrcDbugal: 


k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Chfford  or  others  in  coimection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

0.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises- 1  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  n.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises- 1  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
beheved  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  ftom  the  investigative  team,  in  order  to  address 
potential  privileges. 
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v 


AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Michael  Cohen’s  Office  at  30  Rockefeller  Plaza,  23rd 
Floor,  New  York,  New  York  10112,  and  any  closed 
containers/items  contained  therein,  See  Attachment  B 

SEARCH  AND  SEIZURE  WARRANT 


T 0 :  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  propeily  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)*, 

Michael  Cohen’s  Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New  York,  New  York  101 12,  and  any  closed 
containers/items  contained  therein,  See  Attachment  B 

Tlie  person  or  propeity  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)*. 

See  Attachment  B 


!  18M4^G  2969 

I  ■  (A.\ 


I  find  that  the  affidavit(sX  or  any  recorded  testimony,  establish  probable  cause  to  person  or 

property.  \  ^  [  s  /  ,  ' ' 

YOU  ARE  COMMANDED  to  execute  this  waiTant  on  or  before  ^  ^ 

U  ■  (hoi  to  exceed  14  days)  \ 

Sf  inthedaytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  a;kirfindreasonabl6  cause  has  heeti 

established.  s';.-:'-  y  u 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  waitaht  and  af  eceipt  for  the  prbpeily 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  properly  was  taken,  or  leave  the  copy  md  receipt  at  the 
place  where  the  propeity  was  taken.  '  u  ,  '  ^  ;  ’ ;  >  *  ;  , » " 

"  /  / '  i  i'  i  i-  '  i  \  ^ ' 

The  officer  executing  this  waiTant,  or  an  officer  present  during  the  execution  of  the  warrant,  Imist  prepare  an 
inventoiy  as  required  by  law  and  promptly  return  this  warrant  and  inventoiy  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  wairant  and  inventory  should  be  filed  imder  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  wairant  to  delay  notice  to  the  person  who,  or  whose  propeity,  will  be 
searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ . 


Date  and  time  issued:  Y  ^ 

City  and  state:  New  York.  NY _ 
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AO  93  (Rev,  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Returii 


Case  No.: 


Date  and  time  warrant  executed: 


Copy  of  warrant  and  inventory  left  with: 


Inventory  made  in  the  presence  of : 


Inventory  of  the  propeity  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  perjuiy  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Couit, 


Date: 


Execiiimg  officer’s  signature 


Printed  name  and  title 
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ATTACHMENTS 

I.  Premises  to  be  Searched^ — Subject  Premises-2 

The  premises  to  be  searched  (“Subject  Premises-2”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein; 

An  office  belonging  to  or  assigned  to  Michael  Cohen  located  on  the  23rd  floor  of  the 
building  at  3  0  Rockefeller  Plaza,  New  York,  New  York  10112,  inside  of  the  offices  of  the  law  firm 
Squire  Patton  Boggs.  The  building  located  at  30  Rockefeller  Plaza  is  a  66-floor  office  building 
that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller  Plaza. 

II.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-2  are  evidence,  fi'uits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (consphacy  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  banlc  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fi-aud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
conhibutions)  (the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  tol 


luid/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  pmpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  natare  and  pmpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  woith,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  somnes,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  retmms,  personal  financial  statements,  and  banlc  records,  fi-om  January  1, 
2013  to  the  present. 

j^TRvidenc^relatin^t^asreOTigits,  loans,  and/or  financial  fi^s^^on^betwe^ 
Cohen  and  ^^^^^^^^^^^^^^^^^|and/or 
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1, 2012  to  the  present. 


ind  any  payments  by 


Ito  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosme  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  conununications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 


k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Tinmp  and/ or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tnjmp’s  relationship  in  the  mn  up  to  the  election. 

m.  Evidence  relating  to  any  reimbm'sement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  comiection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 


o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  accormt  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  accormt  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  accormt;  or  the  purpose  or  nafrue  of  any 
financial  transactions  involving  that  financial  institution,  fi'om  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’ s  intent  as  it  relates  to  the  Subject  Offenses  rmder  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-2  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  11.  A  of  this  Attachment  above,  including,  but  not  limited  to,  any  desktop  and 
laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone  belonging  to  Michael  Cohen 
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or  in  his  possession,  portable  hai'd  drives,  disk  drives,  thmnb  drives,  and  personal  digital  assistants. 
In  lieu  of  seizing  any  such  computer  devices  or  storage  media,  this  warrant  also  authorizes  the 
copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-2  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  softwai'e  manuals  or  other  information 
concerning  the  configm'ation  of  the  seized  or  copied  computer  devices  or  storage  media. 

3.  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizm'e  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  erdbrcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant 

hr  conducting  this  review,  law  enforcement  persormel  may  use  various  teclmiques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  smveying  various  file  “dhectories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opeiring  a  drawer 
believed  to  contain  pertinent  files); 

»  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

®  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
dehberately  hidden  files; 

a  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurxences  of  language  contained  hr  such  storage  areas  exist  that  are  intimately  related 
to  the  subj  ect  matter  of  the  investigation;  and 

®  reviewing  metadata,  system  information,  configm'ation  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


8 

2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  222  of  269 


Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  infoiination  within  the  categories  identified  in  Sections 
If.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pui'suant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SONY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  ^  Case  No. 

Michael  Cohen’s  Office  at  30  Rockefeller  Plaza,  23rd  ? 

Floor,  New  York,  New  York  10112,  and  any  closed  ^ 
containers/items  contained  therein.  See  Attachment  B  ^ 


SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)^ 

Michael  Cohen’s  Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New  York,  New  York  10112,  and  any  closed 
containers/items  contained  therein.  See  Attachment  B 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)’. 

See  Attachment  B 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a,m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30), 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 

Date  and  time  issued: 

*  '  j  Judge 's  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _ _  _ 

Executing  officer 's  signature 


Printed  name  and  title 
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ATTACHMENT  B 

I.  Premises  to  be  Searched — Subject  Premises-2 

The  premises  to  be  searched  (“Subject  Premises-2”)  are  described  as  follows,  and  include 
elecbonic  devices,  and  all  locked  and  closed  containers  found  therein: 

An  office  belonging  to  or  assigned  to  Michael  Cohen  located  on  the  23rd  floor  of  the 
building  at  3  0  Rockefeller  Plaza,  New  Y  ork.  New  Y  ork  10112,  inside  of  the  offices  of  the  law  firm 
Squire  Patton  Boggs.  The  building  located  at  30  Rockefeller  Plaza  is  a  66-floor  office  building 
that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller  Plaza. 

n.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-2  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Mehose  Credit  Union,  and/or  taxi 
medalhons,  from  January  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to 


Itnd/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Mehose. 

d.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
20 1 3  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and 
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1,  2U12  to  tJie  present. 


and  any  pa5Tnents  by 


Ito  Cohen,  from  January 


I 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 


j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
'Clifford,  and/oTKaren  McDoupdr 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  m  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Chfford  or  others  in  connection  with  the  election. 


n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 


o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  accoimt  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 


q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  imder  investigation. 


B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-2  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  any  desktop  and 
laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone  belonging  to  Michael  Cohen 
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or  in  his  possession,  portable  hard  drives,  disk  drives,  thumb  drives,  and  personal  digital  assistants. 
In  lieu  of  seizing  any  such  computer  devices  or  storage  media,  this  warrant  also  authorizes  the 
copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-2  also  include: 

1 .  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
dehberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
If.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  aad  Seizure  Warrant 


United  States  District  Court 


for  the 


Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  sem^hed 
or  identify  the  person  by  name  and  address) 

Saf0  Deposit  Box^^l.ocated  at  the  TD  Bank  Branch  at 
500  Park  Avenue,  New  York,  New  York  10019,  and  any 
closed  containers/items  contained  therein,  See  Att.  C 

SEARCH  AND! 


To;  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  propeity  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or^^^^jjhe  the  property  to  be  searched  and  give  its  location)*. 

Safe  Deposit  Bo>^^J,ocated  at  the  TD  Bank  Branch  at  500  Park  Avenue,  New  York,  New  York  10019,  and  any 
closed  containers/irems  contained  therein, See  Attachment  C 

The  person  or  property  to  be  searched^  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized): 

See  Attachment  C 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  seai'ch  and  seize  the  person  or 
propeity. 


YOU  ARE  COMMANDED  to  execute  this  waiTant  on  or  before 


;  ’  \  ^  (not  to  e:>ic^ed  M  ddys) 

Ef  in  the  daytime  6:00  a,m.  to  10  p,m.  □  at  any  time  in  the  day  or  nig^t^s  I  find  rea^ohabld  cause  has  been 

established.  ' 


;  )  s;'  : 

Unless  delayed  notice  is  autliorized  below,  you  must  give  a  copy  of  the  waitapt  and,  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  fi'om  whose  premises,  the  propeity  was  taken,  of  leave  Me  copy  ahd  receipt  at  the 
place  where  the  propeity  was  taken.  '  '  / 

The  officer  executing  this  waixant,  or  an  officer  present  duiing  the  execution  of  tire,  warrant,  muit  prepare  an 
inventoiy  as  requhed  by  law  and  promptly  return  this  wairant  and  inventoiy  to  the  dleik  6f  t|ie  Gourt. 

_ Upon  its  return,  this  wairant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Comt;^ _ 


USAdJ  Initials 


□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
seai’ched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30). 

□until,  die  facts  justifying,  the  later  specific  date  of  .  • _ 

Date  and  time  issued:  ij  /g'  _ 7  _ ■  ''  .  ' 

City  and  state:  New  York.  NY _ 


/fldndge 's  sigdcditl^ ' 

Hon.  Henry  B.  Pitman.  US'.  !Ma6lstrate  Judge' 

PHiited  name  and  ti  fle  \  '•}  ■  ' 
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Return 

i  i: 

Case  No.: 

/ 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

j 

Inventoiy  made  in  the  presence  of : 

1 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized; 

■  j 

i  1 

1 

j 

i 

1 

1 

j 

i 

j 

j 

j 

Certification 

I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  origirral  warrant 
to  the  Corrrt. 

Date: 

i 

Executing  officer  *s  signature 

j 

Printed  name  and  title 

j:  ' 

i 
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ATTACHMENT  C 

L  Premises  to  be  Searched — Subject  Premises-3 

The  premises  to  be  searched  (“Subject  Premises-3”)  are  described  as  follows,  and  include 
all  locked  and  closed  containers  found  therein: 

A  safe  deposit  box  located  inside  the  TD  Bank  branch  location  at  500  Park  Avenue,  New 
York,  New  York  10019,  marked  as  box  ^^^Hlhe  safe  deposit  box  is  in  the  name  of  Michael 
Cohen  and  Laura  Cohen. 

11.  Items  to  Be  Seized 

- A^  Evidencej  Fruits^and  Instrumentalities  of  the  Subject-Offenses -  - - — - 

The  items  to  be  seized  from  Subject  Premises-3  are  evidence,  fruits,  and  instrumentahties 
of  violations  of  18  U.S.C.  §§  371  (consphacy  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fi-aud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

1.  Evidence  relating  to  Michael  Cohen’s  net  worth,  available  cash  and  cash 
equivalents,  assets,  monthly  and  annual  income,  and  income  soru’ces,  fi’om  January  1, 2013  to  the 
present. 

2.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

/ 

3.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

4.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Peclcei',  and/or  Dylan  Howai’d  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

5.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

6 .  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
pubhcity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

7.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 
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8.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contiibution  reporting  requirements,  and  campaign  contribution  limits. 

9.  Any  portable  electronic  storage  device. 

B.  Search  of  Seized  Electronic  Devices 

Probable  cause  exists  to  search  any  seized  electronic  storage  device  for  the  items  set 
forth  in  Section  n(A)(l)-(8),  above. 

C.  Review  of  ESI 

— ^ - Folio  wing  seizui’fr  of  any  electronic-storage  deviee^lawenforeement-^ersonnel(whieh  may- 

include,  in  addition  to  law  enforcement  officers  and  agents,  attorneys  for  the  government,  attorney 
support  staff,  agency  personnel  assisting  the  government  in  this  investigation,  and  outside 
technical  experts  under  government  control)  are  authorized  to  review  the  ESI  contained  therein  for 
information  responsive  to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

»  surveying  various  file  “dkectories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  marldngs  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

*  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
then  precise  contents; 

e  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

»  performing  key  word  searches  through  all  electronic  storage  ar-eas  to  determine  whether 
occmxences  of  language  contained  in  such  storage  ar'eas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

*  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 

Law  enforcement  persormel  will  rnalce  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electi'onically  stored  information  within  the  categories  identified  in  Sections 
n.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  persormel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  fiom  seized  devices  if  necessary  to  evaluate  its  contents  and  to 
locate  all  data  responsive  to  tire  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  maimer  reasonably  designed  to  protect 
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any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedui’es  shall  include 
use  of  a  designated  “filter  team,”  sepai'ate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No. 

Safe  Deposit  Box  ^^^Located  at  the  TD  Bank  Branch  at  } 

500  Park  Avenue,  New  York,  New  York  10019,  and  any  ^ 
closed  containers/items  contained  therein,  See  Att.  C  ^ 

SEARCH  AND  SEIZURE  WARRANT 

To :  Any  authorized  law  enforcenient  officer^” 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  the  property  to  be  searched  and  give  its  location)  \ 

Safe  Deposit  Box  Located  at  the  TD  Bank  Branch  at  500  Park  Avenue,  New  York,  New  York  10019,  and  any 
dosed  containers/items  contained  therein, See  Attachment  C 

The  person  or  property  to  be  searched^  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)  \ 

See  Attachment  C 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


(not  to  exceed  14  days) 

in  the  daytime  6:00  a,m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court.  _ _ 

USMJInitials 


□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30). 

□imtil,  the  facts  justifying,  the  later  specific  date  of  _ 


Date  and  time  issued: 


1^1  tjrfrfy 

*  Judge  *s  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B,  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  235  of  269 
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Return 

Case  No.: 

Date  and  time  warrant  executed:, 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _ 

Executing  officer 's  signature 


Printed  name  and  title 
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ATTACHMENT  C 

I.  Premises  to  be  Searched — Subject  Premises-3 

The  premises  to  be  searched  (“Subject  Premises-3”)  are  described  as  follows,  and  include 
all  locked  and  closed  containers  found  therein: 

A  safe  deposit  box  located  inside  the  TD  Bank  branch  location  at  500  Park  Avenue,  New 
York,  New  York  10019,  marked  as  box^^^Jfhe  safe  deposit  box  is  in  the  name  of  Michael 
Cohen  and  Laura  Cohen. 

n.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses _ 

The  items  to  be  seized  from  Subject  Preniises-3  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

1.  Evidence  relating  to  Michael  Cohen’s  net  worth,  available  cash  and  cash 
equivalents,  assets,  monthly  and  annual  income,  and  income  sources,  from  January  1, 2013  to  the 
present. 

2.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

3.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

4.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  fric., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

5.  Evidence  relatiug  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

6.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

7.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 
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8.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

9.  Any  portable  electronic  storage  device. 

B.  Search  of  Seized  Electronic  Devices 

Probable  cause  exists  to  search  any  seized  electronic  storage  device  for  the  items  set 
forth  in  Section  II(A)(l)-(8),  above. 

C.  Review  of  ESI 

_ Following  .seizure  of  any  electronic  storage  device,  law  enforcement  personnel  /which  may 

include,  in  addition  to  law  enforcement  officers  and  agents,  attorneys  for  the  government,  attorney 
support  staff,  agency  personnel  assisting  the  government  in  this  investigation,  and  outside 
technical  experts  under  government  control)  are  authorized  to  review  the  ESI  contained  therein  for 
information  responsive  to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 

Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  eirforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  if  necessary  to  evaluate  its  contents  and  to 
locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
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any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SONY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 


for  the 

Southern  DisMct  of  New  York 


In  the  Matter  of  the  Seai'ch  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728, 
New  York,  New  York  10065,  and  any  closed 
containers/items  contained  therein,  See  Attachment  D 


Case  No. 


18MAG  2969 


SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  Distiict  of  New  York 


propeily. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  locaiion)\ 

Loews  Regency  Hotel,  640  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  any  closed  containers/items 
contained  therein,  See  Attachment  D 

The  person  or  propeity  to  be  seaiched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)’. 

See  Attachment  D 

I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  searcYhiid  the  person  or 

;  .  (hot  to  exceed  Jd  days)  ' 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  T  findfeasonable  cause  has  boen 

established,  <  '  '  ^  ^  ^  ' 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  waiTant  ahd  a  receipt  for  the  prbpeily 
taken  to  the  person  from  whom,  or  fi-om  whose  premises,  the  property  was  taken,  or  leave  the  copy  apd  receipt  at  the 
place  where  the  propeity  was  taken.  E.  I  ; '  ’  ■  \ 

EE  i ^ .  A  ' 

The  officer  executing  this  wan*ant,  or  an  officer  present  during  the  execution  of  the  Waii-atif,  rhust  prepai'e  an 
inventoiy  as  required  by  law  and  promptly  return  this  wairant  and  inventoiy  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  waiTant  and  inventoiy  should  be  filed  under  seal  by  the  Clerk  of  the  Comt. _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C,  §  2705  (except  for  delay 
of  tiial),  and  authorize  the  officer  executing  this  waiTant  to  delay  notice  to  the  person  who,  or  whose  propeity,  will  be 
seai*ched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30),  >  \  ;  i  s  , 


Date  and  time  issued: 


V- 1  -  /I 


□until,  the  facts  justifying,  the  later  specific  date  of '  1 L 

0 


City  and  state:  New  York.  NY 


Jud^e  d^iatnre 


Hon.  Henry  B.  Pitkiah.'UtS.  Madlstratfe)  Judao  , 

Printed  J:  'f. 
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Return 

Case  No.: 

Date  and  time  wairant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

i! 

I 

1; 


Certification 


I  declare  under  penalty  of  peijury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  wan'ant 
to  the  Couit:. 


Date: 


Executing  officer 's  signature 


I 

I 


Printed  name  and  title 
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ATTACHMENT  D 

I.  Premises  to  be  Searched^ — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electi'onic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  1 7th  floor  of  the  hotel. 

n.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence^  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows; 

a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfe^n^ntoest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  fr’om  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Constiltants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  fr‘om  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  pmpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates.  • 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  soui'ces,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  retarns,  personal  financial  statements,  and  banlc  records,  from  January  1, 
201 3  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and 
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,  and  any  payments  by 

to  me  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Kai*en  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
"David'  PecSa7“amd/oi^Dylan~Howard”about“Donald“Tiimaprfhe^rump~Campaign7  Stephahi^^^^ 

Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  wMi  Donald  Trump  and/or  agents  or  associates  of  the 
Tmmp  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tmmp’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbui'sement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  loiov^ledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  conhibution  limits. 

0.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bade  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


ICohen,  from  January 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  puipose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entily  associated  with  an  account  at  a 
financial  institution;  the  som'ce  of  funds  flowing  into  an  account;  or  the  purpose  or  natoe  of  any 
financial  transactions  involving  that  financial  institution,  fi‘om  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  infoimation  falling  within  the  categories 
set  foiih  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  deslctop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include; 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media;  including  but  not  limited  to  any  physical  keys,  encr5^tion 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 

_mncerningThe  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. _ 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizurc  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officem  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

*  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer- 
believed  to  contain  pertinent  files); 

e  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

e  performing  key  word  sear-ches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

»  reviewing  metadata,  system  information,  configm'ation  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files^ 
documents;,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
ILA  and  II,B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionaltyj  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedux'es  shall  include 
use  of  a  designated  “filter  team,”  sepai‘ate  and  apait  from  the  investigative  team,  in  order  to 
addi*ess  potential  privileges. 
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AO  93  (SONY  Rev,  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

'  for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No. 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  ^ 

New  York,  New  York  10065,  and  any  closed  ^ 

containers/items  contained  therein,  See  Attachment  D  ^ 

SEARCH  AND  SEIZURE  WARRANT 

~~Any  autKdfi^d'law  enforcenaenfcTfficef  " 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)  \ 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  any  closed  containers/items 
contained  therein.  See  Attachment  D 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized) : 

See  Attachment  D 

I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  _ 

(not  to  ejcceed  1 4  days) 

Sf  in  the  da3d;ime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  Warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 


□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Dfor  days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 


Date  and  time  issued: 


A/  Urr\Cy 

*  f  judge  *s  signature 


City  and  state;  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ 

Executing  officer  *s  signature 


Printed  name  and  title 
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ATTACHMENT  D 

I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  1 7th  floor  of  the  hotel. 

n.  Items  to  Be  Seized 

:  ArflEvidence,  FfUi^andTnsfrumentalities^fthe^Subjecf  Offenses  " 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(banlc  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Mehose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfe^n^ntegst  in  taxi  medallions,  and  any  associated  debts  or 
habilities,  to  others,  including  to  |^^^^^^^H|and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates.  ■ 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and^^^^^^^^^^^^H^^^^^|and/or  controlled  by 
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1,  2012  to  the  present 


and  any  payments  by 


to  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Eecker,-and/or-Dylan  Howard-about-Donald  Trump,-the  Trump-Campaign,-Stephanie^ 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbiarsement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 


n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accmmts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B,  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  dr  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include; 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media;  including  but  not  limited  to  any  physical  keys,  enciyption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  imder 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
ILA  and  n.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Soutliern  District  of  New  York 


In  the  Matter  of  the  Seai*ch  of 
(Briefly  describe  ihe  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

An  Apple  iPhone  with  Phone  Number  | 

See  Attachment  E 


) 

) 

) 

) 

) 

) 


Tor 


SEARCH  AND  SEIZURE  WARRANT 
Any  totfiori:zeaTw"®oiTCment  officer 


An  application  by  a  federal  law  enforcement  officer  or  an  attomey  for  the  government  requests  the  search 
ofthe  following  person  or  propeity  located  in  the  Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  Us  location)'. 

An  Apple  iPhone  with  Phone  Number  See  Attachment  E 


The  person  oi  pioperty  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  E 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  seai*ch  and  seize  the  person  or 

.  ^  \  \  1  I  )  M  !  . 


propei-ty. 

YOU  ARE  COMMANDED  to  execute  this  waiTant  on  or  before 


.  /.>:  >  \  '(Hidt  tp  exceed  14  days) 

Sl  in  the  daytime  6:00  a.m,  to  1 0  p.m.  □  at  any  time  in  the  day  or  Mglif  af  I  find  reasonable  cause  has  been 

established.  u  /  ’  V  '  ' 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of fhe  wafTant  and  a  receipt  for  the  propeiiy 
taken  to  the  person  fmin  whom,  or  fi*om  whose  premises,  tlae  propeity  was  tjyceb,  nr;leavd  th^  copy  atid  rece^ipt  at  the 
place  where  the  property  was  taken.  '  .  .  ;  ^ '  .  '  ,  ^ 

The  officer  executing  this  wairant,  or  an  officer  present  during  the  execiitipki  bf  tbd  Wan’ani^,  must  prepare  an 
inventoiy  as  required  by  law  and  promptly  return  tliis  wairant  and  inventory  to  the  Gleik  bf  the  CkTuit: 

_ Upon  its  return,  this  warrant  and  inventoiy  should  be  filed  under  seal  by  the  Clerk  bt  the  Couit. 


VSMJ  Initials 


□  I  find  tliat  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  wairant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
seai'ched  or  seized  (checkihe  appropriate  box)  Ofor  _ days  (not  to  exceed 30).  ,  \  I  i !  : 

□rmtil,  the  facts  justifying,  the  latsf  si)txiifid  c(afe/  6f  _ _ 

Date  and  time  issued;  V  -  /S 

7-  f  (■/  r/T) 

City  and  state:  .New  York,  NY — ^ -  - Hon.  HentV;^.  Plfatfan/  UvSi  Maaisfrate'.liidrift 

Printed  name  mid  title 


. . . 

;  /  5  Judge  ^s^flgnaiur^ 


•; 

i 


■j 

l! 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  1) 


Returii 

Case  No,: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  witli: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  properly  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declai’e  under  penalty  of  peijuiy  that  this  inventory  is  correct  and  was  retui'ned  along  with  the  original  warrant 
to  the  Comt. 


Date:  _ _  _ _ 

Execufmg  officer  *s  signature 


Printed  name  and  title 
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ATTACHMENT  E 

1.  Device  Subject  to  Search  and  Seizure  —  Subject  Device-1 

The  device  that  is  the  subject  of  this  seai'ch  and  seizure  warrant  (“Subject  Device- 1”)  is 
described  as  follows: 


An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 


Dming  the  execution  of  this  seai'ch  waiTant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingeipiints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subj  ect 
Device- 1,  or  hold  Subject  Device- 1  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  this  warrant. 


11.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  natoe  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  goveiTiment,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device- 1  for  evidence,  hurts,  and  inshumentalities  of 
violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
banlc  entries),  1014  (false  statements  to  a  fmancial  institution),  1343  (wire  hand),  and  1344  (banlc 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Mehose  Q-edit  Union,  and/or  taxi 
medaUions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfean^nterest  in  taxi  medallions,  and  any  associated  debts  or 
liabihties,  to  others,  including  to^^^^^^^Hrnd/or  entities  associated  with  hiTn, 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Mehose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  or 
communications  that  indicate  the  natoe  and  purpose  of  payments  made  to  or  fium  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  nature  and  pmpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  thi'ough 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present 


,  to  me  present 


Evidaic^elatin^^agreMnents,  loans,  and/or  financial  transactions  between 

entities  controlled  by 

I  to  Cohen,  fr  om  January 


and  any  payments  byl 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  then- 
agents  or  legal  representatives,  including  any  nondisclosme  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Tmmp  and/or 
agents  or  associates  of  the  Tinmp  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal, 

k.  Evidence  relating  to  Cohen’s  role  in  the  Tmmp  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
pubhcity  involving  Tramp’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  confiibution  limits. 

o.  Communications  with  others,  including  Jeffiey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances,  fi’om  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  soiu'ce  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  fiem  January  1, 2013  to  the  present. 


i 


f.T 

ii 

i: 
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If  the  Govei-mnent  determines  that  Subject  Device- 1  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-1  is  not  subject  to  seizure  pui'suant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device- 1,  upon 
request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 
In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No. 

An  Apple  iPhone  with  Phone  Number 
See  Attachment  E 

SEARCH  AND  SEIZURE  WARRANT 

To1  Ah^TautKofiY^law  enforcement  o^fficeT 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  its  location)  \ 

An  Apple  iPhone  with  Phone  N umber See  Attachment  E 


The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)  \ 

See  Attachment  E 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ _ 

USMJlnitials 


□  I  find  that  immediate  notification  may  have  an  adverse  resuh  listed  in  18  U.S.C.  §  2705  (except  for  delay  j 

of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be  j 

searched  or  seized  (check  the  appropriate  box)  Ofor  ______  days  (not  to  exceed  30).  I 

□until,  the  facts  justifying,  the  later  specific  date  of  _ . 


Date  and  time  issued:  .r». 


1^1  (-^^Cv^ry 

*  I  Judge  *s  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court, 


Date:  _  _ 

Executing  officer's  signature 


Printed  name  and  title 
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ATTACHMENT  E 


L  Device  Subject  to  Search  and  Seizure  -  Subject  Device-1 


The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-1”)  is 
described  as  follows: 


An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 


During  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingerprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Device- 1,  or  hold  Subject  Device- 1  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  this  warrant. 


n.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  persormel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device- 1  for  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (bank 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 


a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1 , 20 1 3  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to 


Imd/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  or 
communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  fiom  January  1, 
2013  to  the  present. 


Evidence  relating  to  agreements,  loans,  and/or  financial  transaction^be^em 

|md/or  entities  controlled  by 

^^^^Hto  Cohen,  fiom  January 


,  and  any  payments  by 


1, 2012  to  the  present. 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  eoordination  or 
eonsultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  assoeiates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publieity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  eampaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  aceountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  fiom  January  1,  2013  to  the 
present. 

p.  Communieations,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  aeeount  or  loan  at 
that  fmaneial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  fiom  January  1, 2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device- 1  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-1  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device- 1,  upon 
request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  he  searched 
or  identify  the  person  by  name  and  address) 

An  Apple  iPhone  with  Phone  Number! 

See  Attachment  F 


) 


\as3o.  MAlQ 


SEARCH  AND  SEIZURE  WARRANT 


e 


To:  Any  authoiized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  seai‘ch 
ofthe  following  person  or  property  located  in  the  Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  its  location) ' 

An  Apple  iPhone  with  Phone  Number  ^^^^^^Hsee  Attachment  F 


The  person  or  properly  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 


See  Attachment  F 


^  I 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  sem'ch  or 

property.  / 

YOU  ARE  COMMANDED  to  execute  this  warrant" on  or  before  ^  ^  vr.-.,  ^ 

(not  p  exceed  14  dtfys) 

sf  in  the  daytime  6:00  a.m.  to  10  p.m.  O  at  any  time  in  the  day  or  night  as  I  finc|  redsonqbfe  cause  hhs  been 

established.  ’lY  .  i  T 

^  ■'  ^  ^  A '  / 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  wan‘ant  and  a  receipt  fof  the  pppdlty  i 
taken  to  the  person  from  whom^  or  from  whose  premises,  the  property  was  taken,  or  leave  the,  copy  and  receipt  at  thei 
place  where  the  propeity  was  taken.  '  J  v  ’  ,  , . 

'  ‘  ■  M  )  I  !  \  I  1  ' 

The  officer  executing  this  warrant,  or  an  officer  present  dui’ing  the  execution  of  the  waiTunt,  must  prepare  an 
inventoiy  as  required  by  law  and  promptly  return  this  wairant  aiid  inventoiy  to  the  Clerk  ofthe  Couit. 

_ Upon  its  return,  this  wan^ant  and  inventoiy  should  be  filed  under  seal  by  the  Clerk  of  the  Couit. _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  □for  _ days  (not  to  exceeded). 


Date  and  time  issued; 


□until,  the  facts  justifying,  the  later  specific  date  of  1 


City  and  state:  New  York.  NY 


^ Judge  "s;s(ghattwe 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge  -  ^  ; 

Frinied  name,  and  title  ^  ' 


'Mi 

'  iU  M  U  ' 
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ATTACHMENT  F 


I.  Device  Subject  to  Search  and  Seizure  —  Subject  Device-2 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-2”)  is 
described  as  follows: 


An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 


Dming  the  execution  of  this  search  waixant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingeiprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Device-2,  or  hold  Subject  Device-2  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  ordei’ 
to  gain  access  to  tire  contents  of  any  such  device  as  authorized  by  this  warrant. 


n.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assistmg  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device-2  for  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§  371  (consphacy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wke  fi:aud),  and  1344  ^ank 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  ^^^^^^^^^md/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Mehose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  or 
communications  that  indicate  the  natui'e  and  pmpose  of  payments  made  to  or  fi'om  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  mdividuals  in  connection  with 
Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  commmiications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accormts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
20 1 3  to  the  present. 


Cohen  and 


Evidence  relating  to  agreements,  loans,  and/or  financial  tonsactionsbetwe^ 

|and/or  entities_conholle^yH^^|^H^|^| 

Ito  Cohen,  firom  January 


and  any  payments  byl 


1, 2012  to  the  present 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  then 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  commuirications  related  to  such  agreements. 


i.  Evidence  of  communications  involvhig  Michael  Cohen,  Donald  Trirmp  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howar'd  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relatmg  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  CHfford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  Icnowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requhements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  banlc  accormts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  tire 
present. 


p.  Communications,  records,  documents,  apd  other  files  reflecting  false 
representatiorrs  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  accormt;  or  the  pmpose  or  nahire  of  any 
financial  fransactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 
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If  the  Government  deteitnines  that  Subject  Device-2  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-2  is  not  subject  to  seizmn  pursuant  to 
Federal  Rule  of  Criminal  Procedm’e  41(c),  the  Government  will  return  Subject  Device-2,  upon 
request. 

Additionally,  review  of  the  items  described  in  this  Attaclunent  shall  be  conducted  pui'suant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No. 

An  Apple  iPhone  with  Phone  Number 
See  Attachment  F  * 

SEARCH  AND  SEIZURE  WARRANT 


) 

) 


To:  “Any  authorizedlaw  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  Us  location)  \ 

An  Apple  iPhone  with  Phone  Number^^^^^^^^l^ee  Attachment  F 


The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  F 

I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  _ 

(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Ofdr  days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ . 

Date  and  time  issued: 

(T  I  Y  Judge  s  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ 

Executing  officer's  signature 


Printed  name  and  title 
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ATTACHMENT  F 

I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-2 


The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-2”)  is 
described  as  follows: 


An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 


During  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingerprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Devlce-2,  or  hold  Subject  Device-2  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  this  warrant. 


II,  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device-2  for  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (bank 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medalfions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  or 
communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 


2017.08.02 


20 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  268  of  269 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 


g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 


Cohen  anci 


I  and/or  entities  controlled  by 


and  any  payments  by  | 


[to  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  accormt  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 


I 
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If  the  Government  determines  that  Subject  Device-2  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-2  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device-2,  upon 
request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  he  searched 
or  identify  the  person  by  name  and  address) 

Loews  Regency  Hotel,  540  Park  Avenue,  Room 
1628 


ISMAG 


Case  No. 


2968 


APPLICATION  FOR  A  SEARCH  AND  SEIZURE  WARRANT 

property  to  be  searched  and  give  its  location). 

Loews  Regency  Hotel,  540  Paik  Avenue,  Room  1628,  a  Suite  that  Encompasses  Rooms  1628, 1629,  and  1630  New  Yolk,  New  York  100 

^ImoateiUmthe--— Sotithern _ Disttiotof  New  Yotk  - ,thereisnowcoDcealed|iAwi!».tt. 

person  or  describe  the  property  to  be  seized)'. 

See  Attached  Affidavit  and  its  Attachment  A 


The  basis  for  the  search  under  Fed.  R.  Crim.  P.  41(c)  is  (check  one  or  more): 

S^vidence  of  a  crime; 

0^ontraband,  fruits  of  crime,  or  other  items  illegally  possessed; 

S^roperty  designed  for  use,  intended  for  use,  or  used  in  committing  a  crime, 

□  a  person  to  be  arrested  or  a  person  who  is  unlawfully  restrained. 

The  search  is  related  to  a  violation  of: 

CockSectIon(s)  Offeme  Descnption(s) 

18  use  371. 1005, 1014. 1343,  Conspiracy,  false  bank  entries,  false  statements  to  a  financial 
1344;  52  usc  30116  and  30109  institution,  Wire  fraud,  bank  fraud,  and  illegal  campaign  contributions 

The  application  is  based  on  these  facts: 

See  Attached  Affidavit  and  its  Attachment  A 


gf  Continued  on  the  attached  sheet. 

□  Delayed  notice  of  30  _  days  (give  exact  ending  date  if  more  than  30  days: 


under  18  U.S.C.  §  3103a,  the  basis  of  which  is  set  forth  on  the  attached  sheet. 


)  is  requested 


Sworn  to  before  me  and  signed  in  my  presence. 


Date 


City  and  state:  New  York,  NY 


|4iQAorcv{>U 

Printed  i 


Judtgels  signature  v'i/V/j 

name  and  title 
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TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


_  Special  Agent  Federal  Bureau  of  Investigation,  being  duly  sworn, 

deposes  and  says: 

1.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBF’).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 
involving  electronic  evidence. 

2.  On  or  about  April  8,  2018,  the  Honorable  Henry  B.  Pitman,  United  States 
Magistrate  Judge,  issued  a  search  and  seizure  warrant  for  the  premises  known  and  described  as 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein.  The  warrant  and  my  supporting  affidavit  (the 
“Affidavit”)  are  appended  hereto.  The  Affidavit  is  incorporated  herein  by  reference  in  its  entirety 
as  Exhibit  A. 


UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  of  America  for  a  Search  and  Seizure 
Warrant  for  the  Premises  Known  and  Described 
as  Loews  Regency  Hotel,  540  Park  Avenue, 
Room  1628,  a  Suite  that  Encompasses  Rooms 
1628,  1629,  and  1630  New  York,  New  York 
10065,  and  Any  Closed  Containers/Items 
Contained  Therein 
Reference  No.  2018R00127 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 
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3,  On  or  about  April  9, 2018,  based  upon  a  conversation  with  another  law  enforcement 
agent  who  spoke  to  an  employee  of  Loews  Regency  Hotel,  I  learned  that  Michael  Cohen  is  in  fact 
staying  in  Room  1628  (in  a  suite  encompassing  rooms  1628, 1629,  and  1630)  (collectively,  “Room 
1628”),  not  Room  1728.  Accordingly,  I  respectfully  submit  the  attached  amended  warrant 
pursuant  to  Rule  41  of  the  Federal  Rules  of  Criminal  Procedure  for  the  following  Subject  Premises: 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein  (“Subject  Premises-4”).  For  the  reasons  detailed  in 
the  Affidavit  and  herein,  1  believe  that  there  is  probable  cause  to  believe  that  Subject  Premises-4 

contains  evidencerliTJits;^andYnstrumentalities“of'vioratiOns  of“l  8  U^S.Gr^§§H005^(false-banR 

entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (bank  fraud) 
(collectively,  the  “Bank  Fraud  Offenses”),  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371 
(conspiracy  as  it  pertains  to  the  other  Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

4.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachment  A  to  this  affidavit  and  to  the  Search  and  Seizure 
Warrant. 
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5.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 
Court  orders  otherwise. 


Special  Agent 


FBI 

Sworn  to  before  me  on 
9th  day  of  April,  2018 


UNITED  STATES  MAGISTRATE  JUDGE 
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ATTACHMENT  A 

L  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630)  (collectively,  “Room 
1628”),  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New  York 
10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject  Premises- 
4  is  located  on  the  16th  floor  of  the  hotel. 

n.  Items  to  Be  Seized 

A.  Evidence,  Emits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 

of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fiuud),  and  1344 
(banlc  fi-aud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 

Imd/or  entities  associated  with  him. 


liabilities,  to  others,  including  to 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
inHicutp;  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  tmisactionsbetween 

Cohen  and^^^^^^^^^^^^^^^^^^|and/or  by 
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and  any  payments  from  January 

1, 2012  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  JCaren  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 

consiflmtlrattwith'tfeffrtmip^eafflpai^^  -  . 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
puhUcity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contrihution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’ s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  HA  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 


C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  ofiBcers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
then  precise  contents; 

®  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

®  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

«  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  fiom  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team  ”  separate  and  apart  horn  the  investigative  team,  in  order  to 
address  potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  of  America  for  a  Search  and  Seizure 
Wan-ant  for  the  Premises  Known  and  Described 

iNew 


as  (1)  502  Park  Avenue, 

York,  New  York  10022,  (2)  Michael  Cohen’s 
Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New 
York,  New  York  101 12,  (3)  Safe  Deposit  Box  # 
^[Located  at  the  TD  Bank  Branch  at  500  Park 
Avenue,  New  York,  New  York  10019,  and  (4) 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  : 
1728,  New  York,  New  York  10065,  and  Any  ; 
Closed  Containers/Items  Contained  Therein,  and  : 
the  Electronic  Devices  Known  and  Described  as  : 
/-1-Van  Anple^iPhono-with-^Phone^Number-^^J 
|md  (2)  an  Apple  iPhone  with  Phone  : 


Number  _ 

Reference  No.  2018R00127 


TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 

Special  Agent,  Federal  Bureau  of  Investigation,  being  duly  sworn, 

deposes  and  says: 

1.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 
involving  electronic  evidence. 

2.  I  raalce  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 
Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  premises  specified  below  (the  “Subject 
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Premises”)  and  the  electronic  devices  specified  below  (the  “Subject  Devices”)  for,  and  to  seize, 
the  items  and  infonnation  described  in  Attachments  A,  B,  C,  D,  E  and  F.  This  affidavit  is  based 
upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enfoi'cement  personnel;  and  my  training,  experience  and  advice  received  concerning  the 
use  of  electronic  devices  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored 
infonnation  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of 
establishing  probable  cause,  it  does  not  include  all  the  facts  that  I  have  learned  during  the  course 
of  my  investigation.  Where  the  contents  of  documents  and  the  actions,  statements,  and 

Tnnversations  of  others  are  reported  herein7  they  are  reported  in  substanee  and  in  parVexeeptwhere 


otherwise  indicated. 

B.  The  Subject  Premises  and  Subject  Devices 

3.  Subject  Premises- 1,  Subject  Premises-2,  Subject  Premises-3  and  Subject  Premises- 


4  (collectively,  the  “Subject  Premises”)  are  particularly  described  as: 

a.  Subject  Premises-1  is  Apartment  ^(located  inside  the  building  at  502 
Park  Avenue,  New  York,  New  York  10022.  The  building  located  at  502  Part  Avenue  is  a  32- 
floor  brick  residential  building.  Subject  Premises-1  is  located  on  theH^^loor  of  the  building. 
Based  on  my  review  of  New  York  City  property  records,  I  have  learned  that  Michael  Cohen  and 
Laura  Cohen  own  Subject  Premises-1.^  Additionally,  as  described  below.  Subject  Premises-1  is 
Cohen’s  full-time  residence. 

b.  Subject  Premises-2  is  an  office  located  on  the  23rd  floor  of  the  building  at 
30  Rockefeller  Plaza,  New  York,  New  York  10112.  The  building  located  at  30  Rockefeller  Plaza 


'  As  noted  infra,  I  have  learned  that  on  or  about  October  28,  2015,  Cohen  transfeired  Subject 
Premises-1  into  a  trust. 
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is  a  66-floor  office  building  that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller 
Plaza.  Subject  Premises-2  is  located  on  the  23rd  floor  of  the  building  inside  of  die  offices  of  the 
law  finn  Squire  Patton  Boggs.  The  office  is  assigned  to  Michael  Cohen.  As  described  below, 
Michael  Cohen  works  and  conducts  meetings  at  Subject  Premises-2. 

c.  Subject  Premises-3  is  a  safety  deposit  box  located  inside  the  TD  Bank 

branch  location  at  500  Pai'k  Avenue,  New  York,  New  York  10019.  Based  on  my  review  of  records 
maintained  by  TD  Bank,  I  have  learned  that  the  safety  deposit  box  is  approximately  five  inches  by 
ten  inches  in  size,  and  is  marked  as  box^^^|rhe  safety  deposit  box  is  in  the  name  of  Michael 
GohemandBaura  Cohen; - — — — - — — — - - — — 

d.  Subject  Premises-4  is  Room  1728  located  inside  the  Loews  Regency  Hotel 
at  540  Park  Avenue,  New  York,  New  York  10065.  The  building  is  a  luxury  hotel  located  on  Park 
Avenue  and  61st  Street.  Subject  Pi-emises-4  is  located  on  the  17th  floor  of  the  hotel.  Based  on  my 
review  of  emails  obtained  pursuant  to  search  warrants  described  below,  I  have  learned  that  on  or 
about  January  5,  2018,  Cohen  received  an  email  from  an  employee  of  Loews  Regency,  which 
included  a  price  quote  for  a  long-term  stay  suite  based  on  a  three-month  stay  from  January  8  to 
April  8, 2018.^  On  or  about  January  29, 2018,  Cohen  sent  an  email  to  a  Loews  Regency  employee, 
stating,  in  pertinent  part:  “I  just  spoke  to  my  wife  and  she  has  scheduled  the  move  for  Thursday. 
Please  mark  down  tliat  we  will  be  taldng  possession  on  Thursday,  February  1st.”  Based  on  my 
review  of  cell  phone  location  data,  I  have  learned  that,  over  the  past  24  hours,  two  cellular  phones 
used  by  Cohen  have  been  located  in  the  vicinity  of  Subject  Premises-4.  In  paiticular,  on  or  about 


^  Although  the  quoted  price  contemplated  a  three-month  stay  from  January  8  to  April  8,  it  appears 
that  Cohen  did  not  move  in  until  February  1,  and  as  of  today,  April  8,  cellphone  location 
information  demonstrates  that  Cohen’s  cellulai"  phones  are  in  still  in  the  vicinity  of  Subject 
Premises-4. 
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April  8,  2018,  law  enforcement  agents  using  a  “t'iggerfish”  device  identified  Room  1728  as  the 
room  within  the  hotel  in  which  the  Subject  Devices  ai-e  most  likely  present.^ 

e.  Therefore,  I  believe  that  Cohen  is  temporarily  residing  in  Subject 

Premises-4. 

4.  Subject  Device-1  and  Subject  Device-2  (collectively,  the  “Subject  Devices  )  aie 
particulai'ly  described  as: 

a.  Subject  Device- 1  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 
Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 

'Device=Tis'subscribed  todVIichael-eohen—Based-on-my  review-of  cellphone  location-information- 

maintained  by  AT&T,  I  have  learned  that  Subject  Device- 1  is  presently  located  in  the  Southern 
District  of  New  Y  ork. 

b.  Subject  Device-2  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 
Based  on  my  review  of  records  maintamed  by  AT&T,  I  have  learned  that  Subject 

Device-2  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-2  is  presently  located  in  the  Southern 
District  of  New  York. 

c.  Based  on  my  training,  experience,  and  research,  and  from  consulting  the 
manufacturer’s  and  service  providers’  advertisements  and  product  technical  specifications 
available  online,  I  loiow  that  the  Subject  Devices  have  capabilities  that  allow  them  to,  among  other 
things:  make  and  receive  telephone  callsj  save  and  store  contact  information,  send  and  receive 


^  Based  on  my  conversations  with  these  agents,  I  understand  that  it  is  also  possible  that  the  Subject 
Devices  are  one  floor  below,  in  Room  1628.  Howev er ,  as  noted,  I  understand  that  Cohen  received 
a  price  quote  for  a  long-term  stay  suite  and  is  residing  there  with  his  family.  Based  on  my 
conversations  with  FBI  agents  conducting  sui-veillance,  I  understand  that  Room  1728  appeal's  to 
be  a  suite,  whereas  Room  1628  appears  to  be  a  standard  room. 
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emails  and  text  messages;  download  and  run  mobile  telephone  applications,  including  encrypted 
call  and  messaging  application  such  as  WliatsApp,  Signal,  and  Dust;  take,  send,  and  receive 
pictures  and  videos;  save  and  store  notes  and  passwords;  and  store  documents. 

C.  The  Subject  Offenses 

5.  For  the  reasons  detailed  below,  I  believe  that  there  is  probable  cause  to  believe  that 
the  Subject  Premises  and  Subject  Devices  contain  evidence,  finits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§  1005  (false  bank  entiles),  1014  (false  statements  to  a  financial 
institution),  1343  (wire  fraud),  and  1344  (bank  fraud)  (collectively,  the  “Banlc  Fraud  Offenses”), 

^2^UTS-er-§^§-301T6(-a)(4)(A)  and— 30109(d)(-l-)(A)(l)- (illegal-campaign  Gonfributions)-(tlae- 

“Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other 
Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

D.  Prior  Applications 

6.  The  FBI  and  the  United  States  Attorney’s  Office  for  the  Southern  District  of  New 
York  (“USAO”)  have  been  investigating  several  courses  of  criminal  conduct  by  Michael  Cohen. 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

7.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails  and 
other  content  infonnation  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 
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a.  On  or  about  July  1 8, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  account^^^^J^gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received 
between  January  1, 2016  and  July  18,  2017  (the  “First  Cohen  Gmail  Warranf’)- 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant 

l@gmail.com  (the 


for  content  stored  in  the  iCloud  account  associated  with  Apple  ID 
“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Waixanf ’). 

c.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 
warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 
”Nbvember“13y20l7  (the  “Second'Cohen  GmaiFWaiTant— 


d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 


waiTant  for  emails  in  the  account  I 


Ithe  “Cohen  MDCPC  Account”)  sent  or 


received  between  the  opening  of  the  Cohen  MDCPC  Account'^  and  November  13, 20 1 7  (the  First 


Cohen  MDCPC  Warrant”). 

8.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBFs  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  die  First  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  Warrant.  On  or  about  March  7,  20 1 8,  the  SCO  provided  the  USAO 


Based  on  my  I'eview  of  this  wairant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  ^d 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 
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with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  Wairant.^  A  filter  team 
working  witli  the  SCO  had  previously  reviewed  the  content  produced  pursuant  to  these  wairants 
for  privilege. 

9.  On  or  about  Febi-uary  28,  2018,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  the  Cohen  Gmail  Account  and  the  Cohen  MDCPC  Account,  among  other  accounts,  sent 
or  received  between  November  14, 2017  and  February  28, 2018  (the  “Third  Cohen  Gmail  Warrant” 
and  the  “Second  Cohen  MDCPC  Wairant”).  The  content  produced  pursuant  to  these  warrants  is 
subject  to  an  ongoing  review  for  privilege  by  an  SDNY  filter  team.^ 

- ^10T*^-^The^emails-seareh=^wan-ants  described- above-are  refen-ed-to~Gollectively-as-the- 

“Cohen  Email  Warrants.” 

11.,  On  or  about  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  a  warrant  for 
prospective  and  historical  cellphone  location  infomiation  for  Subject  Device-1  and  Subject 
Device-2.  On  or  about  April  8, 2018,  the  USAO  and  FBI  sought  and  obtained  authority  to  employ 
an  electronic  technique,  commonly  known  as  a  “tiiggerfish,”  to  determine  the  location  of  Subject 
Device-1  and  Subject  Device-2, 
n.  Probable  Cause 
A.  Overview 

12.  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  FBI 
are  investigating,  among  other  things,  schemes  by  Target  Subject  Michael  Cohen  (a)  to  defraud 
multiple  banks  from  in  or  about  2016  up  to  and  including  the  present,  and  (b)  to  make  an  illegal 

^  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  February 
2,  2018. 

^  On  or  about  Februaiy  28, 2018  and  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  search  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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campaign  contribution  in  October  2016  to  then-presidential  candidate  Donald  Trump.  As  noted, 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  seiwed  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

1 3 .  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations 
in  and  omitted  material  inforaiation  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banlcs  m  comrection  with  a  transaction  intended  to  relieve  Cohen  of 
approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 

drrdetaiTbelowrimthese-finaneiaTstatements^and  in-his-oral  and  other  written-statements  to  theses 

banks,  Cohen  appears  to  have  (i)  intentionally  misrepresented  his  ability  to  pay  cash  by  failing  to 
disclose  cash  he  began  receiving  in  2017  from  new  consulting  work;  (ii)  significantly  understated 
his  total  holdings  of  cash  and  cash  equivalents;  (iii)  failed  to  disclose  tens  of  thousands  of  dollars 
he  received  in  monthly  interest  income,  and  (iv)  failed  to  inform  the  banks  fi'om  which  he  was 
seeking  debt  relief  that  he  had  agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party,^H 


acquisition  of  the  taxi  medallions  seeming  Cohen’s 


in  coimection  with 


debt.  By  making  these  misrepresentations  and  material  omissions,  Cohen  avoided  maldng 
monthly  payments  on  his  loans,  and  attempted  to  fraudulently  induce  the  banks  to  I'elieve  him  of 
certain  repayment  obligations  and  personal  guarantees  that  Cohen  and  his  wife  had  signed. 

14.  Additionally,  the  investigation  has  revealed  that  shortly  before  the  2016 
presidentiad  election,  Cohen  made  a  payment  of  $130,000  from  a  limited  liability  coiporation 
(“LLC”)  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an  extramaiital  affair  with 
then-candidate  Trump.  This  payment  was  made  to  Clifford  in  exchange  for  an  agreement  not  to 
make  any  public  disclosures  about  her  alleged  affair  with  Trump.  As  set  forth  below,  there  is 
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probable  cause  to  believe  that  Cohen  made  this  payment  to  Clifford  for  the  purpose  of  influencing 
the  presidential  election,  and  therefore  that  the  payment  was  an  excessive  in-kind  contribution  to 
the  Tmmp  campaign. 

15.  Based  on  my  review  of  emails  obtained  from  the  Cohen  Email  Warrants, 
information  obtained  pursuant  to  the  iCloud  Warrant,  and  documents  pi'oduced  pursuant  to 
subpoenas,  as  well  as  my  review  of  public  sources,  I  have  learned  that  Cohen  has  used  tlie  Subject 
Premises  to  (a)  receive  documents  related  to  the  transaction  intended  to  relieve  Cohen  of  his  taxi 
medallion  debt,  (b)  receive  documents  and/or  conduct  meetings  related  to  his  consulting  work,  (c) 

receive  documents  and/or  conduct-meetings  relating  to  his  finanees-and-assets^some-of-whieh^as- 

noted  above  and  as  detailed  fuither  herein,  he  has  concealed  from  tire  banks  in  connection  with  the 
refinancing  of  his  taxi  medallion  debt,  (d)  receive  and  send  documents  relating  to  his  payment  to 
Clifford,  and  (e)  house  and  operate  electronic  devices  that  were  utilized  in  connection  with,  among 
other  things,  the  taxi  medallion  transaction,  Cohen’ s  consulting  work,  and  his  payment  to  Clifford. 
Specifically,  as  described  below.  Subject  Premises-1  likely  contains  evidence  concerning  Cohen’s 
taxi  medallion  loans,  his  negotiations  with  banks,  his  personal  finances,  his  consulting  work,  his 
tax  returns,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence, 
all  of  which  constitute  or  contain  evidence  of  the  Subject  Offenses.  Additionally,  as  described 
below.  Subject  Premises-2  likely  contains  evidence  relating  to  Cohen’s  consulting  work,  his 
finances,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence. 
Subject  Premises-3,  as  described  below,  likely  contains  evidence  relating  to  Cohen’s  assets  and 
finances,  including  assets  that  may  not  have  been  disclosed  to  banks  in  coimection  with  the 
refinancing  of  Cohen’s  taxi  medallion  debt  or  documents  relating  to  such  assets,  and  documents 
or  evidence  related  to  Cohen’s  payment  to  Clifford.  Subject  Premises-4  likely  contains  electronic 
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devices,  including  Subject  Device- 1  and  Subject  Device-2,  which  themselves  contain  evidence  of 
the  Subject  Offenses,  including  concerning  Cohen’s  taxi  medallion  loans,  his  negotiations  with 
banks,  his  personal  finances,  his  consulting  work,  his  tax  returns,  and  his  payment  to  Clifford. 
Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that  the 
Subject  Premises  and  Subject  Devices  will  include  evidence  of  the  Subject  Offenses. 

B.  Probable  Cause  Regarding  Subjects’  Commission  of  the  Subject  Offenses’ 

The  Bank  Fraud  Scheme 
(i)  Cohen ’s  Statements  to  Sterling  National  Bank 

^ _ __16 _ As-setJorth  in-detaiLbelow,  in20 14, J^nhen, Through  LLCs  contTolledby  him  and.. 

his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  fi-om  Sterling  National  Bank  (“Sterling”)  and 
the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions,  for  approximately  $20  million. 
Tliough  entered  into  by  LLCs,  the  loans  were  also  secured  by  personal  guarantees  in  the  names  of 
both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry  weakened  and  the  medallions  lost  value, 
Cohen  sought  to  renegotiate  the  terms  of  those  loans  and/ or  relieve  himself  fi'om  their  obligations, 
including  the  personal  guarantees.  As  part  of  that  effort,  Cohen  made  a  series  of  representations 
to  Sterling  and  Mebose  about  his  net  worth,  assets,  available  cash  and  income,  among  other  things. 
Specifically,  based  on  my  review  of  records  maintained  by  Sterling  and  Melrose,  and  public 
sources  concerning  the  taxi  industiy  and  the  value  of  taxi  medallions,  as  well  as  my  participation 
in  interviews  with  a  Sterling  executive  vice-president  (the  “Sterling  Employee- 1”)  and  two  other 


’  In  the  following  recitation  of  probable  cause,  I  frequently  refer  to  phone  calls  or  text  messages 
involving  Cohen.  The  text  messages  described  herein  as  sent  or  received  by  Cohen  were  all  sent 
or  received  fi'om  the  telephone  numbers  associated  with  Subject  Device-1  or  Subject  Device-2. 
The  vast  majority  of  the  phone  calls  described  herein  made  or  received  by  Cohen  were  made  or 
received  by  the  telephone  numbers  associated  with  Subj ect  Device-1  or  Subj ect  Device-2,  although 
in  certain  limited  instances  Cohen  used  a  landline  or  other  phone. 
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Sterling  employees  (“Sterling  Employee-2”  and  “Sterling  Employee-3”),  I  have  learned,  among 
other  things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  LLC  owns  two 
medallions).®  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  from  Capital  One  bank,  for  which  the  medallions  served  as  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  paify  made  monthly  payments  to 

’Cohen,  who’iirtOHrused  some  oTthose“proceeds  to  make  hisrmonthlydoan  payments-to  Gapital— 

One. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 
the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One.  By  in  or  about 
September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would  allow 
Cohen  to  pay  off  his  loans  at  Capital  One  and  boiTow  more  money  from  the  then-increase  in  value 
of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval  in  the 
taxi  industry— as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber— taxi  medallion 
loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  maiket  value  of  taxi 
medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans — like  the  loans  held  by 
Cohen — were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee-1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 


®  One  of  these  companies.  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which 
according  to  letters  from  Capital  One  in  Sterling’s  files — ^was  greater  than  his  previous  debt  at 
Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This  allowed 
Cohen  to  cash  out  tire  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8, 2014,  each  of  Cohen’s  sixteen  taxi  medallion  LLCs  entered  into  loan  agreements 
and  promissory  notes  with  Sterling  for  the  principal  sum  of  $1,375,000,  with  repayment  due  on 

December  87^01 6— Eaefrloamwas  signed  by-Michael  onLaura  Cohenrdepending  on  who  wasThe- 

sole  shareholder  of  the  LLC.  The  address  listed  for  each  of  the  LLCs  was  the  address  for  Subject 
Premises-1 .  The  loans  were  also  each  secur  ed  by  a  security  agreement,  dated  the  same  day,  making 
the  medallions  collateral  for  the  notes.  To  give  Sterling  additional  security,  Michael  and  Laura 
Cohen  signed  personal  guarantees  and  confessions  of  Judgment,  giving  Sterling  the  right  to  pursue 
collection  against  the  Cohens’  personal  assets  were  their  coi-porations  to  default  under  the  loan 
agreements.  The  personal  guaranty  agi'eements  stated  that  the  LLCs  had  offices  at  the  address  for 
Subject  Premises-1,  and  contained  a  notice  provision  that  stated  that  any  notices  required  by  the 
agreements  should  be  mailed  to  Subj  ect  Premises- 1 .  In  total,  Sterling  agreed  to  lend  approximately 
$22  million  to  the  Cohens’  companies. 

d.  Pursuant  to  participation  agreements.  Sterling  transferred  45  percent  of  Cohen’s 
taxi  medallion  debt  to  Melrose.® 


®  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit  Union  Administration  (  NCUA  ). 
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e.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions,  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling’s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.1®  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  loiow  tliat  Sterling  viewed  the 
transaction  favorably  because,  accounting  for  loan  payments,  cash  flows  from  the  medallions  were 
projected  to  be  positive,  the  value  of  the  collateral  (as  esthnated  by  Sterling)  exceeded  $42  million, 
-and  the-net-worth  of  Cohen— who-was-the-direct-obligor  under-the  guarantee  agreements==was 

over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

f.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  bacldng  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies.  Additionally,  Cohen  began  falling  behind  on  loan  payments 
to  Sterling  and  Melrose.  I  loiow  from  records  maintained  by  Sterling  and  an  inteiwiew  with  Sterling 
Employee-2  that,  beginning  in  or  around  September  2015,  Cohen  told  Sterling,  in  sum  and 
substance,  that  the  individual  leasing  Cohen’s  medallions  had  fallen  behind  in  making  payments  to 
Cohen,  and  that  as  a  result,  the  monthly  cash  flow  from  his  taxi  medallions  had  been  reduced, 
leaving  him  with  a  shortfall  of  approximately  $16,000  each  month.  For  instance,  I  have  reviewed 
an  email  from  Sterling  Employee-2,  dated  September  9,  2015,  summarizing  a  call  with  Cohen — 
which  according  to  the  email  and  toll  records  for  Cohen’s  cellphone  occun-ed  on  September  8, 

Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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2015 — during  which  Cohen  told  Sterling  Employee-2,  in  sum  and  substance,  about  his  cash  flow 
problems  and  a  monthly  shortfall  of  approximately  $16,000.  In  tliat  same  email,  Sterlmg 
Employee-2  commented  that  despite  Cohen’s  statements,  his  personal  financial  information 
“indicate[d]  a  strong  ability  to  make  up  the  difference  in  payments.”  Cohen,  however,  according 
to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction  in  Cohen’s  montlily  payments. 

g.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
mterview  with  Sterling  Employee-2, 1  have  learned  that  Cohen  and  Sterling  Employee-2  spoke 
again  on  September  28,  2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 

-individual-to  whom  Cohendeases  the  medallions  had  again  reduced  monthly  payments  to  Cohen  JL 

know  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility — ^both  internally  and  with  Cohen — of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.''  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my 
review  of  loan  documents  and  records  maintained  by  Sterling,  I  know  that  in  or  about  November 
2015,  as  a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his 
medallions  to  cover  monthly  interest  payments.  Sterling  and  Melrose  agreed  to  amend  their  loans 
with  Cohen  by,  among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Mefrose  and  extending 
the  loan  matuiity  date  to  December  8, 2017. 

h.  I  know  from  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2,  as  well 
as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee- 1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named^^^^^^^^|.  who  would  agree  to 

"  Based  on  my  review  of  pi'opeity  records,  I  know  that  on  or  about  October  28,  2015,  around 
the  time  period  when  Sterling  raised  the  possibility  of  Cohen  posting  his  personal  residence— 
Subject  Premises-1 — ^as  collateral,  Cohen  transferred  Subject  Premises-1  into  a  trust. 
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assume  Cohen’s  debt  with  Sterling  and  Mehose.  Based  on  ray  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterlmg  Employee- 1  and  Sterling  Employee-2  referenced 
above,  I  Icnow  that  by  or  before  October  20 1 6,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
coiporate  to 

for  the  balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 


maintained  by  Sterling,  and  my  paiticipation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  tlie  transfer  of  the  medallion  loans— and  because  Sterhng  was  unfamiliar  withal 
-Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 

approximately  one  million  dollars;-prioi'-to  the  transfer— Cohen  rejected  this  request-initially^But 

on  or  about  January  3 1 , 20 1 7,  Cohen  told  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with^^^^|  Indeed,  in  an  email  sent  by  Cohen  to  Sterling  Employee-2  on  or 
about  February  22,  2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million  from  the  loan 
amount.” 


i.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 
was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
fr-om  Cohen  to|^^^^^^m  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 
Melrose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
Melrose  agree  to  the  terms.  On  or  about  May  2, 2017,  Sterling  Employee-1  told^^^^^^^l 
that  Melrose  had  agreed  to  the  deal  in  principle,  and  that  Sterling  would  be  sending  the  parties  a 
teim  sheet  shortly. 

j.  In  order  for  the  banlcs  to  conduct  diligence  and  evaluate  the  proposed  transaction 
fully,  they  requested  financial  information  firom  the  parties.  On  or  about  June  7,  2017,  Sterling 


2017.08.02 


16 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  25  of  201 

Employee-1  emailed  Cohen  to  request  an  “updated  personal  financial  statement,”  completed 
jointly  with  Cohen’s  wife,  and  Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June 
8, 2017,  Cohen  emailed  Sterling  Employee-1  a  Sterling  personal  financial  statement  form  that  had 
been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1,  2017 
(the  “May  2017  Financial  Statement”)  that  was  also  attached.  The  May  2017  Financial  Statement 
included  a  cover  letter  from  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 

-$4T,955,000rtotaHiabilities  of  $39rl30,000;-and-a  net  worth"of-$2782~55000^  The-May-20T7- 

Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash, 
$26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence.^^ 

k.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee-1, 1  have  learned  that  Sterling  Employee-1  reviewed  the  May  2017  Financial  Statement 
with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee-1  asked  Cohen  about 
specific  line  items  on  the  financial  statement,  including  the  cash  amount,  value  of  medallions,  and 
total  liabilities.  Cohen  stated  to  Sterling  Employee-1,  in  sum  and  substance,  that  the  May  2017 
Financial  Statement  was  accurate. 

l.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen  and^^| 
^^^^^^|.ttaching  a  non-binding  term  sheet  memorializing  the  potential  transaction  between 


Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  the  precipitous  decline  in 
assets  fi'om  his  2014  financial  statement  to  his  2017  financial  statements  can  be  explained 
primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets  and  medallion 
investments. 
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Sterling,  Melrose,  Cohen,  Tlie  term  sheet  included  a  cover  letter  addressed 

to  Cohen  at  Subject  Premises-1.  The  parties  negotiated  the  provisions  of  the  term  sheet  and,  on  or 
about  September  5,  2017,  Sterling  Employee- 1  sent  Cohen  a  copy  of  the 

executed  term  sheet.  According  to  the  term  sheet, ^^^^^^^would  borrow  $20,000,000 
from  Sterling  and  Mefrose,  to  be  secured  by  the  medallions  that^^^^^^^^^was  to  acquire  from 
Cohen. 

m.  As  part  of  the  agi-eement,  according  to  tire  teim  sheet,  $1,265,913  in  principal  (which 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 

"^repaid-by-Gohen  anddhe  twG-banfcsrwitli  Cohen  paying- fifty-percent  and  the-banlcs  dividing  the- 

remaining  half  of  the  balance.  Based  on  my  review  of  an  internal.  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  apreliminary  agi'eement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Mefrose  would  absorb 
$357,167  and  $275,789,  respectively,  in  the  form  of  chai-ge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance — despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars  ^because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee- 1,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  paid  of  the  agreement.  Sterling 
and  Mefrose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guai'antees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  ^^^^|transaction,  Cohen  would  no  longer 
have  had  any  outstanding  obligations  to  Sterling  or  Mefrose. 

n.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Mefrose  (as  well  as  Mefrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
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required  and  requested  additional  financial  statements  and  tax  returns  for  Cohen  and 
for  its  credit  underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  September  25, 
2017,  Cohen  emailed  Sterling  Employee-2  a  copy  of  his  2016  tax  return.  The  tax  return  listed 
Cohen’s  mailing  address  as  Subject  Premises-1 .  Additionally,  on  or  about  October  5, 2017,  Cohen 
re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October 
6,  2017,  Cohen  emailed  Sterling  Employee-2  a  statement  of  financial  condition,  dated  September 
30,  2017  (die  “September  2017  Financial  Statement”). 

o.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 

“included  a  eover-letter-from  Jeffl'ey  Cetzelj-Cohen^  accountanCstating,  in  sum  and  substance j-that_ 

the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.^^  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (including  the  taxi  medallion  entities  and  his  real  estate  holdings), 
$3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence  (which,  for  die  first 


Based  on  my  review  of  Cohen’s  financial  statements,  I  Icnow  that  this  further  decline  in 
assets  can  be  explained  primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets 
and  medallion  investments. 

Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thii-ty-two  New 
Yoi'k  taxi  medallions  at  approximately  $180,187.50,  whi^^vj^^^^msiderably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-^^^^Hterm  sheet. 
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time,  he  indicated  was  held  by  a  trust). The  September  2017  Financial  Statement  included  assets 
and  liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions 
and  some  of  his  real  estate  investment  entities. 

p.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  arid  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  around  the  time  Cohen  provided  Sterling 
with  these  financial  statements — i.e.,  in  or  around  September  2017 — Cohen  stopped  paying 
mondily  loan  payments  on  his  taxi  medallion  loans  altogether.  According  to  Sterling  Employee- 
2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  fiinds  to  pay  the  monthly 

-principal  and-interest  payments-omhis  medallion-loans^  By-in-or  about  DeGember42017T^Sterling 

and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 
September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  deteimined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Coher^^^^^|ransaction  was  favorable  for  the  bank 
-  that  is,  that  ^^^^^^ivould  be  a  better  borrower  than  Cohen. 

q.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  The  demand  letter  was  addi'essed  to  Cohen  at 
Subject  Premises-1.  On  December  29,  2017,  Sterling  sent  Cohen  a  letter  stating  that  he  was  in 
default  rmder  the  loans  between  Sterling  and  Cohen’s  medallion  corporations.  The  notice  of 
default  was  addressed  to  Cohen  at  Subject  Premises-1 .  Cohen  did  not  make  an  immediate  payment 
on  the  loans,  but  instead  sent  an  e-mail  to  Sterling  Employee- 1  on  or  about  January  24,  2018, 

Based  on  my  review  of  property  records  maintained  by  the  City  of  New  York,  and  my 
participation  in  an  interview  with  Getzel,  I  know  that  in  2015,  Cohen  transferred  his  residence  to 
a  trust.  He  did  not  disclose  that  transaction  to  Getzel  or  Sterling  nntil  in  or  about  September  2017. 
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stating  that  during  the  closing  of  the  Cohen-^^^^^^^|ransaction,  Cohen  would  “bring  all 
payments  up  to  date  as  well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  on 
Januaiy  24, 201 8,  that  at  the  closing  of  the  Cohen^^^^|.  transaction,  Sterling  provide  a  letter 
stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal  guarantees  of  the 
medallion  loans  had  been  terminated. 

r.  The  Cohen^^^^^^|ti‘ansaction,  howevei',  did  not  close.  On  or  about  January 

29,  2018,  attorney  emailed  attorneys  for  Sterling  and  stated  that  “at  this  time 

there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have  changed  and  v'e  are  not  prepared 

-to  go  forwardT^^^ — - - - - = — ^ - — - 

s.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  know  that  after  the  Cohen-^^^^^^^|deal  fell  apart. 
Sterling '  assigned  Cohen’s  loans  to  Sterling  Employee-3,  who  specializes  in  collecting  on 
defaulting  loans.  From  my  participation  in  an  interview  with  Sterling  Employee-3,  my  review  of 
telephone  call  notes  talcen  by  Sterling  Employee-3,  and  my  review  of  telephone  records,  I  know 
tliat  Sterling  Employee-3  spoke  several  times  to  Cohen  on  or  about  January  30, 2018  about  paying 
down  and/or  restructuring  Cohen’s  outstanding  taxi  medallion  loans.  On  the  calls,  which  in  total 
lasted  more  than  an  hour,  Cohen  stated  in  sum  and  substance  that  he  did  not  have  more  than 
$1,250,000  to  pay  toward  the  medallion  loans.  On  the  call,  in  the  com'se  of  reviewing  the  failed 
Cohen-^^^^l  ti-ansaction.  Sterling  Ernployee-3  questioned  Cohen  about  the  price 

was  to  have  paid  for  each  medallion,  and  whether  there  was  a  side  agreement  between 
Cohen  and  Cohen  denied  that  there  was  any  side  agi'eement  with^^^^^| 

t.  On  or  about  January  31,  2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
paying  $500,000  to  bring  the  loans  current  and  $750,000  to  bring  the  principal  balance  to 
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$20,500,000.  Cohen  also  suggested  revised  monthly  interest  payment  amounts.  The  signature 
block  on  the  email  indicated  that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  On  or 
about  January  31,  2018,  Sterling  Employee-3  responded  to  Cohen  and  stated,  in  sum  and 
substance,  that  Cohen  would  need  to  pay  the  entirety  of  the  overdue  payments  and  pay  down  the 
principal  balance  of  the  loan  to  $20,000,000  (in  total,  a  payment  of  approximately  $1,750,000), 
and  would  need  to  make  larger  monthly  interest  payments. 

u.  On  or  about  Februaiy  1,  2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
“[pjayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if  [Sterling]  will  waive 

past-due-amountsT^but-stated-^Ldo  NOT  have-more-than  the  $L2-50mA^(Emphasis  in  originaL)- 

Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial  resources  to  post 
additional  collateral  or  pre-fund  monthly  payments.  The  signature  block  on  the  email  indicated 
that  Cohen’s  addixss  was  the  addi-ess  for  Subject  Premises-2.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-3,  I  have  learned  that  since  January  30,  2018,  Sterling  has 
continued  to  renegotiate  the  medallion  loans  with  Cohen  based  on  Cohen’s  representations  about 
his  current  financial  position.  In  paiticulai’,  according  to  Sterling  Employee-3,  Cohen  and  Sterling 
have  an  agreement  in  principal  to  restruchire  Cohen’s  loans  based  in  part  of  Cohen’s  agreement  to 
make  a  principal  payment  of  approximately  $750,000,  to  make  a  payment  of  $500,000  to  become 
current  on  interest  pa)mients,  and  to  post  $192,000  in  cash  collateral  for  his  firture  monthly 
payments  on  the  loan.  Cohen  also  agreed  to  pledge  an  interest  he  had  in  a  property.  Sterling 
Employee-3  has  stated  that  had  Cohen  indicated  he  had  more  than  $1,250,000  available  to  him. 
Sterling  would  have,  among  other  things,  negotiated  for  a  lai'ger  reduction  to  the  principal  amount 


of  the  loan. 
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(ii)  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  fi'om  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 

17.  As  set  forth  in  detail  below,  despite  multiple  written  and  oral  representations  by 
Cohen  to  Sterling  (and,  by  extension,  Mebose^^)  that  he  had  insufficient  funds  to  pay  do^ATi  the 
principal  balance  of  the  medallion  loans,  malce  monthly  interest  payments,  or  pay  past-due 
amounts,  it  appears  that  between  2016  and  the  present,  Cohen  opened  and  maintained  bank 
accounts  at  First  Republic  Bank  (“First  Republic”),  and  then  received  millions  of  dollars  in 
consulting  payments  in  these  accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these 
-accounts  andreceiyed^these,funds_duilng_thewery  perioditLwhich  he  made  disclosures  to  Sterlings 
about  his  personal  finances  (including  his  assets  and  liabilities)  and  his  ability  to  make  payments 
on  the  medallion  loans.  In  these  disclosures  to  Sterling — and  despite  being  asked  about  these  bank 
accounts  by  his  accountant — Cohen  misled  the  banlc  by  claiming  he  had  insufficient  liquidity  to 
satisfy  his  obligations  or  meet  the  bank’s  demands,  while  withholding  information  about  these 
ongoing  revenue  streams  and  liquid  financial  assets  at  Fii'st  Republic. 

18.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced 
pursuant  to  a  subpoena  by  Fhst  Republic,  and  my  participation  in  and  review  of  reports  of 
interviews  with  a  First  Republic  sales  manager  (“First  Republic  Employee-1”)  and  a  First  Republic 
senior  managing  dkector  (“Fnst  Republic  Employee-2”),  I  have  learned,  among  other  tilings,  the 
following: 


Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Mebose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Meh^s^^fc^ 
Mebose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen-^^^^^^ 
transaction.  Based  on  my  review  of  reports  of  interviews  wM^elros^mployees,  1  also  know 


that  Cohen  called  employees  at  Mebose  regai'drng  the  Cohetij 


Iransaction. 
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a.  Cohen  and  his  wife  have  been  customers  of  Fhst  Republic  since  approxhnately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts  at  Fhst  Republic,  some  in  his  own 
name  and  others  in  the  names  of  corporate  entities.  According  to  First  Republic’s  loiow-your- 
customer  records  on  Cohen, his  primaiy  physical  address  is  the  address  for  Subject  Pi-emises-1. 

b.  On  or  about  October  26,  2016,  in  Manliattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 
Consultants  Account”).  Cohen  was  the  only  authorized  signatory  on  the  account.  According  to 
account  opening  documents,  the  primary  address  for  Essential  Consultants  LLC  was  the  address 

for  Subject  Pi-emises-l^When  Cohen  opened  th&^Essential  Consultants-AecountsrFirst  Republic- 

Employee- 1  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  loiow-your- 
customer  questions  about  the  purpose  of  the  account — ^the  answers  to  which  First  Republic 
Employee-1  entered  into  a  form^® — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Cohen  also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the 
revenue  from  his  consulting  business — ^which  he  said  was  not  his  main  source  of  income — separate 
fi-om  his  personal  finances.  As  set  foilh  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  as  described  below,  the  account  was  not  intended  to  receive — ^and  does  not 


Certain  financial  mstitutions  are  requfred  to  conduct  such  procedmres  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

First  Republic  Employee-1  fust  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel.  First 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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appear  to  have  received — ^money  in  connection  with  real  estate  consulting  work;  in  addition,  the 
account  has  received  substantial  payments  from  foreign  sources. 

c.  I  know  from  my  review  of  First  Republic  banlc  records  that  were  scheduled  by  an 
FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  finm  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 
fi'om  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  I  know  the 
following: 

_ ^ _ i^Beginning-on-oi-aboutJanuary  31,=20-l-7,  Cohen  began  receiving-monthly- 

payments  of  $83,333  into  the  Essential  Consultants  Account  from  an  entity  called  Columbus  Nova 
EEC.  According  to  public  somnes,  Columbus  Nova  is  an  investment  management  firm  controlled 
by  Renova  Group,  an  industrial  holding  company  based  in  Zurich,  Switzerland  that  is  controlled 
by  Russian  national  Viktor  Vekselberg.  From  January  2017  to  August  2017,  the  Essential 
Consultants  Account  received  seven  payments  totaling  $583,332.98  from  Columbus  Nova  EEC. 

ii.  Beginning  on  or  about  April  5,  2017,  the  Essential  Consultants  Account 
began  receiving  payments  from  Novartis  Investments,  SARE,  which  I  believe  to  be  the  in-house 
financial  subsidiary  of  the  Swiss  phaimaceutical  company  Novartis  International  AG  (“Novartis”). 
Between  April  2017  and  February  2018,  the  Essential  Consultants  Account  received  eleven  wire 
payments  from  a  Swiss  banlc  account  held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980, 
for  a  total  of  $1,099,780. 

iii.  Beginning  in  or  about  April  2017,  the  Essential  Consultants  Account  started 
receiving  wire  payments  from  a  bank  account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&r’).  Specifically,  on  or  about  April  14,  2017,  AT&T  sent  $100,000  to  the 


2017.08.02 


25 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  34  of  201 


Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  ten  $50,000  payments  fi'oin  AT&T.  In  total,  AT&T  sent 
$600,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10,  2017,  June  9,  2017,  July  10,  2017,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  fi-om  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is  Korea  Aerospace  Industries  Ltd.  (“KAI”).  KAI  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 
Jlepartment  of  Defense,  among  other  customers  .^ _ - - -  .  .. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertsbanlc,  a  Kazakhstani  bank.  The  listed  account 
holder  at  Kazkommertsbanlc  was  a  second  Kazaldistani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 

vi.  In  total,  from  on  or  about  January  3 1, 2017  to  on  or  about  February  1, 2018, 
the  Essential  Consultants  Account  received  approximately  $3,033,112.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  1 0,  20 1 8,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23.  Cohen’s  withdrawals  from  the  Essential  Consultants 
account  reveal  tliat  it  was  used  for  largely  personal  purposes,  including  to  pay,  among  other  things, 
American  Express  bills  and  fees  from  “the  Core  Club,”  a  private  social  club  in  New  York. 

d.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  accoimt  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  “MDC&A  Account”). 
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Cohen  was  the  only  authorized  signatory  on  the  account.  According  to  account  opening 
documents,  the  primary  address  for  MDC&A  Account  was  the  address  for  Subject  Premises- 1. 
Among  other  thmgs,  the  MDC&A  Account  received  ten  wire  transfers  and  one  check  &om  an 
account  in  the  name  of  Squire  Patton  Boggs,  a  law  firm.  As  noted  above,  Subject  Premises-2  is 
located  inside  the  New  York  office  of  Squire  Patton  Boggs.  In  total,  from  on  or  about  April  5, 
2017,  to  on  or  about  January  2, 2018,  the  MDC&A  Account  received  $426,097.70  in  deposits,  and 
the  balance  in  the  account  as  of  January  2,  2018,  was  $344,541.35.  As  discussed  below,  Cohen 
never  disclosed  any  of  the  balance  in  the  Essential  Consultants  or  MDC&A  accounts  to  Sterling 


during-the~negotiations-with=^respeet  to-the  I 


lansaction  or  the  subsequent-loan¬ 


refinancing  negotiations,  including  in  his  May  2017  Financial  Statement  and  September  2017 


Financial  Statement. 

19.  Based  on  my  review  of  emails  that  were  seized  pursuant  to  the  Cohen  Email 
WaiTants,  and  my  review  of  reports  of  interviews  witli  employees  of  AT&T  and  Novai'tis,  it 
appears  that  the  aforementioned  payments  to  the  Essential  Consultants  Account  and  MDC&A 
Account  were  for  political  consulting  work,  including  consulting  for  intei'national  clients  on  issues 
pending  before  the  Tramp  administration.  Specifically,  from  my  review  of  emails  from  the  Cohen 
Gmail  Account,  the  Cohen  MDCPC  Account,  and  public  sources,  I  have  learned  the  following: 

a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe 
is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  “Consulting  Agreement”  between  KAI  and 
Essential  Consultants  dated  as  of  about  May  1,  2017.  The  agreement  indicates  that  Essential 
Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that  Essential 
Consultants  would  render  “consulting  and  advisory  services,  as  requested  by  KAI,  and  that  KAI 


would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Two  Hundred  Thousand 
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($1,200,000.00)  US  Dollars,”  disbursed  thi'ough  eight  $150,000  mstallments  between  May  2017 
and  December  2017.  I  have  also  reviewed  invoices  in  amounts  of  $150,000  that  Cohen  emailed 
to  an  individual  whom  I  believe  is  affiliated  with  KAI.  At  the  top  of  the  invoices  the  address  listed 
for  Essential  Consultants  is  the  address  for  Subject  Premises-2. 

b.  On  or  about  May  8,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe  is 
affiliated  with  BTA  Banlc.  The  signature  block  on  Cohen’s  email  listed  “Essential  Consultants 
LLC”  and  “Michael  D.  Cohen  &  Associates,  PC”  and  provided  the  address  for  Subject  Premises- 
2.  In  the  email,  Cohen  attached  a  document  purporting  to  be  a  “Consulting  Agreement”  between 

BTA-Bank  and  Essential-Consultants  dated  as  of  about  May  8, 2017.— The  agieementindicates-that- 

Essential  Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that 
Essential  Consultants  would  render  ‘Consulting  and  advisory  services”  to  BTA  Bank,  and  that 
BTA  Bank  would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Eight  Hundred 
Thousand  ($1,800,000.00)  US  Dollars,”  disbursed  thi'ough  monthly  payments  of  $150,000.  On  or 
about  May  10, 2017,  Cohen  sent  an  email  to  an  employee  of  BTA  Banlc,  and  attached  to  the  email 
an  invoice  to  BTA  Banlc  in  the  name  of  Essential  Consultants,  with  the  address  of  Subject  Premises- 
2.  The  invoice  contemplated  a  $150,000  payment  to  Essential  Consultants  for  a  “monthly 
consulting  fee.” 

c.  On  or  about  January  23,  2017,  Cohen  appears  to  have  entered  into  a  consulting 
agreement  with  AT&T,  which  contemplates  that  Essential  Consultants  “shall  render  consulting  and 
advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential  Consultants]  ofthose  issues 
and  matters  with  respect  to  which  AT&T  Services  desires  [Essential  Consultants] ’s  assistance  and 
advice.”  The  agi-eement  indicates  that  Essential  Consultants  had  the  addi'ess  of  Subject  Premises- 
1.  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his  services  ...  a  consulting  fee  of  Fifty 
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Thousand  ($50,000)  Dollai's  ...  per  month.”  Based  on  my  review  of  reports  of  interviews  with 
AT&T  employees,  I  have  learned  diat  AT&T  retained  Cohen  to  consult  on  political  issues, 
including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner,  and  tax  reform. 

d.  On  or  about  March  1,  2017,  Cohen  appears  to  have  entered  into  a  contract  between 
Novartis  and  Essential  Consultants,  which  provides  that  Essential  Consultants  will  “provide 
consulting  and  advisory  services  to  Novartis  on  matters  that  relate  to  the  repeal  and  replacement  of 
the  Affordable  Care  Act  in  the  US  and  any  other  issues  mutually  agreeable  to  [Essential 
Consultants]  and  Novartis.”  The  conti'act  provides  for  a  “consulting  fee  of  One  Million  Two 
Hrmdr:ed-Thousan(L($l,200,000L)  US  dollars,”  toEe  paidToJBssentiaLConsultantsJiLfiqual  monlhljL 
installments  over  the  course  of  a  year.  Based  on  my  review  of  reports  of  interviews  with  Novartis 
employees,  I  have  learned  that  Novartis  retained  Cohen  to  provide  political  consulting  services  and 
to  gain  access  to  relevant  policymakers  in  the  Tinimp  Administration. 

e.  In  or  about  Febmaiy  2017,  Cohen  began  negotiating  the  terms  of  a  “strategic 
alliance”  with  Squire  Patton  Boggs.  On  or  about  March  4,  2017,  Squire  Patton  Boggs  emailed 
Cohen  a  “strategic  alliance  agreement.”  Under  the  terms  of  the  agreement,  Cohen  agreed  to 
generate  business  for  the  law  firm,  and  Squire  Patton  Boggs  agreed  to  pay  to  Cohen  “an  annual 
strategic  alliance  fee  of  $500,000,  payable  in  twelve  (12)  equal  monthly  installments.”  Squu'e 
Patton  Boggs  also  agreed  to  provide  Cohen  with  “dedicated  and  segregated  office  space  hr  [Squire 
Patton  Boggs’s]  New  York  and  Washington  D.C.  offices,  which  office  space  shall  be  physically 
separate  from  [Squire  Patton  Boggs’s]  offices  and  have  locked  doors  and  its  own  locked  file 
cabinets.”  On  or  about  April  3,  2017,  Squire  Patton  Boggs  announced  on  its  website  that  is  had 
formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would  “jointly  represent 
clients.” 
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20.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  infoiination  to  Sterling  or  Mehose.  Specifically,  based  on  my  review  of  documents 
provided  by  Getzel  (as  noted  above,  Cohen’s  accountant  at  the  time),  my  participation  in  an 
Getzel,  notes  and  I 

have  learned  the  following: 

a.  In  or  about  May  2017,  Getzel  met  with  Cohen  at  Subject  Pi‘emises-2.  At  the 
meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice  called  Michael 
-D^Cohen  &  Associates  E.C.,  and  a  consulting-company  calledEssentiaLGonsultants  LLC.„C_Qhea_ 
told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in  connection  with 
his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to  be  between  five 
and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  in  which  Getzel 
wrote  that  “[ajttached  is  a  draft  of  the  new  PFS  as  of  September  30,  2017”  and  attached  a  draft  of 
the  September  2017  Financial  Statement.  The  draft  statement  reflected  that  as  of  September  30, 
2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately  $33,430,000  (comprised  of 
taxi  medallion  intei-ests,  real  estate  interests,  and  his  personal  residence  and  propeify),  and  liabihties 
of  approximately  $45,630,000,  leaving  him  purportedly  over  $  12  million  in  debt.  In  the  same  email, 
Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact  that  the  financial  statement  did  not 
list  any  value  associated  with  either  the  Essential  Consultants  Account  or  the  MDC&A  Accomit: 
“[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  -  Michael  D.  Cohen  &  Associates 
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POC  [.y/c]  and  Essential  Consultants  LLC.  Please  advise  whether  or  not  these  should  be  diselosed 
and  what  value.” 

e.  On  Or  about  October  6, 20 1 7,  Cohen  called  Getzel  by  telephone — which  is  reflected 
on  toll  records  for  Cohen’s  cellphone — and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value.  On  or  about  October  6,  2017,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 
Account,  responded  to  Getzel’s  email  with  the  answer  “[l]ooks  good  to  me.”  Cohen  never  directed 
Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 

StatemenC-ImaJetter-dated-October-  6,-2017,  addressed  to-Getzel,  Cohem  stated,  ALhave^reviewed- 

the  attached  statement  of  financial  condition  and  find  it  to  be  correct  and  consistent  with  the 
representations  that  I  made  to  your  firm.  The  attached  is  an  accurate  reflection  of  my  assets, 
liabilities  and  net  worth  (deficit)  as  of  September  30,  2017.”  Attached  to  that  letter  was  the 
September  2017  Financial  Statement,  which,  as  noted  above,  was  then  transmitted  to  Sterling  in 
connection  with  the  proposed  taxi  medallion  transaction  between  Sterling,  Cohen,  and^^^^^^^^ 

21.  Based  on  my  review  of  a  report  of  an  inteiview  with  Sterling  Employee- 1, 1  have 
learned  that  Cohen  did  not  disclose  his  income  stream  fi'om  Essential  Consultants  to  Sterling 
Employee-1  or,  to  his  Icnowledge,  anyone  else  at  Sterling.  According  to  Sterling  Employee-1, 
knowledge  of  such  an  income  stream  would  have  affected  Sterling’s  demands  during  the 
negotiations,  particularly  with  respect  to  the  amount  of  a  principal  paydown  of  Cohen’s  debt. 

Cohen  Understated  His  Available  Cash 

22.  In  addition  to  withholding  the  existence  of  his  Essential  Consultants  income  firom 
Sterling  and  Melrose,  it  appears  that  Cohen  also  substantially  understated  his  available  cash  and 
cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  ixom  my  review  of  the  September 
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2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen  represented  that  he  had 
$1,250,000  in  cash  as  of  September  30,  2017.  I  also  know  that  on  or  about  January  30,  2018,  in  a 
telephone  call  with  Sterling  Employee-3,  and  on  February  1,  2018,  in  an  email  to  Sterling 
Employee-3,  Cohen  represented  that  he  did  not  have  more  than  $1,250,000  in  cash.  But,  fi'om  my 
review  of  a  summary  of  bank  records  that  were  scheduled  by  forensic  accountants,  I  have  learned 
that  Cohen  had  approximately  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30, 2017. 
Additionally,  as  of  February  1,  2018,  Cohen  had  approximately  $6,000,000  in  cash  and  cash 
equivalents.  Specifically,  from  my  review  of  the  account  schedule  and  bank  records,  I  have  learned 

the  following:- — - - - - — - - - — — - —  - 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  thi*ee  accounts  at  Capital  One  Banlc.  As  of  February  1, 
2018,  Cohen  had  a  total  of  $1,389,245.78  in  these  accounts. 

b.  Cohen  has  thi-ee  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 
As  of  February  1, 2018,  Cohen  had  $1,284,996.13  in  these  accounts. 

c.  As  of  September  30, 2017,  Cohen  had  $260,689.18  in  an  account  at  SignatoeBank. 
As  of  February  1, 2018,  Cohen  had  $261,517.55  in  this  account. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checldng  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic.  As  of  February  1, 2018,  Cohen  had  $3,332,992.95  in  these  accounts. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30, 2017. 

f.  As  of  September  30, 2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  his  name  and  one  held  jointly  with  his 
wife.  Cohen  also  has  a  safety  deposit  box  at  TD  Bank— Subject  Premises-3.  The  safety  deposit 
box  was  opened  on  December  13,  2017  in  the  names  of  Michael  and  Laura  Cohen. 

h.  In  total,  as  of  September  30, 2017,  Cohen  had  at  least  $4,713,935.08  in  his  accounts 
at  Capital  One  Bank,  City  National  Bank,  Signature  Bank,  Sterling  Bank,  Bethpage  Credit  Union, 
First-RepublicT-and-Morgan— Stanley^ — As  oLFebruary— 1^2018^Cohen  had-“$6,268,7B2»59-m  his 
accounts  at  Capital  One  Baidc,  City  National  Bank,  Signature  Banlc,  First  Republic,  and  Morgan 
Stanley.^^ 

23.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  written  and  oral 
representations  to  Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and 
that  Cohen  withheld  infonnation  regarding  approximately  $5  million  in  funds  from  Sterling  and 
Melrose  in  order  to  secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on 
my  participation  in  an  interview  with  Steiding  Employee-2,  and  my  review  of  reports  of  interviews 
with  Sterling  Employee-1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling 
and  Melrose  would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to 
renegotiate  Cohen’s  medallion  loans  and  on  what  terms,  or  to  its  decision  whether  approve  of  the 
transfer  of  those  loans  to 

Based  on  my  review  of  the  account  schedules  described  above,  I  know  that,  as  of  the  date  of  this 
affidavit,  the  account  balances  for  TD  Banlc  have  not  yet  been  included  in  the  schedule  for  either 
date  and  the  account  balances  for  Sterling  National  Banlc  and  Bethpage  Credit  Union  have  not  yet 
been  included  in  the  schedule  for  February  1,  2018.  Thus,  to  the  extent  that  these  accounts  have 
positive  balances,  Cohen’s  total  balances  in  fact  were  even  higher  on  these  dates. 
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Cohen  Has  Unreported  Interest  Income 

24.  It  appears  that  Cohen  also  hid  from  Sterling  interest  income  that  he  was  receiving  in 
connection  with  a  six  million  dollar  loan  he  made  to  another  individual.  Specifically,  I  know  from 
my  review  of  the  May  2017  Financial  Statement  and  Septemher  2017  Financial  Statement  that 
Cohen  provided  to  Sterling  that  Cohen  did  not  disclose  that  he  had  made  a  note  receivable  in  the 
amount  of  approximately  $6  million,  or  that  he  was  earning  approximately  $60,000  per  month  in 
interest  income  in  connection  with  that  loan.  But,  from  my  review  of  a  summary  of  bank  records 
that  were  reviewed  by  another  law  enforcement  agent,  my  review  of  propeify  records  and 

doGuments-obtainedpursuantto  the- Cohen  EmaiLWaiTants,an(fmy_participationiiLanjnter¥iew_ 

with  Getzel,  I  have  learned  the  following: 

a.  Based  on  my  review  of  property  records,  I  have  learned  that  on  or  about  March  12, 

Cohen  to  approximately 

$2,000,000.^°  It  appears  that  the  promissory  note  was  unsecm-ed  by  any  real  property.  On  or  about 
April  28,  2014,  Cohen  and^^^|  amended  the  promissory  note,  and  restructured  the  loan  to 
increase  the  principal  amount  to  approximately  $5,000,000.  Under  the  terms  of  the  amended 
promissory  note,  the  loan  was  secured  apartment  in  Sunny  Isles  Beach,  Florida.  On 

or  about  April  8,  2015,  Cohen  ai^^^^|restated  the  promissory  note  to  increase  the  principal 
amount  to  $6,000,000.^* 

b.  Based  on  my  review  of  a  copy  of  the  restated  note,  which  was  obtained  pm-suant  to 
the  Cohen  Email  Warrants,  I  have  learned  that  under  the  teims  of  the  amended  and  restated 

j^jnemiedfom 

The  note  states  that  the  loan  is 

jointly  and  severally.  For  ease  of  reference,  I  refer  simply  to  '^^^^^^herein. 
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promissory  note,  Cohen’s  loan  an  interest-only  loan,  and  that  the  principal  balance 

of  the  loan  bears  interest  at  an  annual  rate  of  12.25  percent.  I  also  know  tliat  the  amended  and 
restated  promissory  note  includes  a  schedule  of  payments  that  requirc^^^^^^^to  pay  Cohen 
approximately  $6 1 ,250  per  month  beginning  in  April  2015  and  ending  in  April  2019.  The  note  also 
requu'es  tha^^^^^^repay  die  principal  balance  of  $6,000,000  on  April  28, 2019. 

c.  Based  on  my  review  of  bank  records,  I  have  learned  that,  consistent  with  the  terms 
of  the  amended  and  restated  promissory  note,  ^^^^|has  made  monthly  payments  of 
approximately  $61,250  since  April  2015.  Specifically,  based  onmy  review  of  records  maintained 
-by-Capital  One  Bank,  I  haveJeamedthat  fi-om  April  20 15Ao-October  2015,  Cohen  received  checks 
fi'om  entity  called^^^^^^^^^^^^^^^^^^^^^^^^^^^totaling  $61,250  per  month,  which  he 
deposited  into  his  personal  bank  account  at  Capital  One  Bank.^^  It  appears  from  my  review  of  bank 

sources  tha^^^^^|  is  of 

From  my  review  of  records  maintained  by  Capital  One  Bank,  I  have  also  learned  that  since  October 
2015,  Cohen  hais  received  checks  fr'om  an  entity  called  |iilllliHliiiiiiiiiiiiiiiiiH  totaling 
$61,250  per  month,  which  he  deposited  into  his  personal  bank  account  at  Capital  One  Bank.  It 
appears  from  my  review  of  bank  records  and  public  souices  that  owner  of 

In  total,  it  appeai-s  that  Cohen  receives  approximately  $735,000  per  year 
in  interest  payments  from^^^^^ 

d.  Based  on  my  review  of  Cohen’s  May  2017  and  September  2017  Financial 
Statements,  my  review  of  his  2015  and  20 16  tax  returns  obtained  via  subpoena  and  fr-om  the  Cohen 
Email  Warrants,  and  my  participation  in  an  interview  with  Getzel,  I  have  learned  that  Cohen  did 


In  April  2015,  Cohen  received  a  pro-rated  payment.  For  all  months  thereafter,  the  total  payment 
equaled  $61,250,  but^^^^Htften  made  the  payment  in  multiple  checks. 
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not  disclose  this  interest  income  he  was  receiving  from  Sterling  or  Mehrose,  or  list  it 

on  his  tax  returns.  I  have  also  learned  that  while  this  interest  income  is  taxable,  Cohen  did  not  tell 
Getzel— his  accountant— -about  the  income,  and  Getzel  only  learned  about  the  income  because  he 
began  doing  ^^^^^^|taxes  in  2017.^^ 

25.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to 
Sterling  and  Melrose  tliat  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen 
withheld  information  relating  to  the  interest  income  he  is  receiving  from  order  to 

secure  favorable  temis  in  his  renegotiation  of  his  medallion  loan. 


Cohen-Had-^a-Side-Agreement-With- 


26.  As  set  forth  in  detail  below,  dui'ing  the  course  of  Cohen’s  negotiations  to  sell  his 
intei'est  in  taxi  medallions  and  the  associated  debt  to  Cohen  not  only 

misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  agreement  he 
had  negotiated  with^^^^|;  it  appears  thal^^^^^igreed  to  pay  an  above-market  price 
for  Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agi'eed  to  pay  ^^^^^^|approximately 
$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  my  participation  in  interviews  with  Sterling  Employee-1,  Sterling  Employee-2, 
and  Sterling  Employee-3, 1  have  learned,  among  other  things,  the  following: 

a.  On  or  about  September  5,  2017,  an  executed  teim  sheet  was  circulated  by  Sterling 


Employee-1  to  Cohen  and^^^^^Hlhe  tern  sheet  listed  Cohen’s  address  as  the  address  for 
Subject  Premises-1 .  According  to  the  term  sheet,  .^^^^^^^^^^would  bon'ow  $20,000,000 
from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that  to  acquire  from 


Accordingly,  this  interest  income — ^which  should  have  been  reported  as  such  on  Cohen’s  tax 
returns — is  included  herein  in  calculations  of  Cohen’s  true  cash  position. 
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Cohen.  At  a  price  of  $20  million  for  thuty-two  taxi  medallions,  the  proposed  transaction  valued 
each  medallion  as  worth  $625,000.  The  tenn  sheet  also  contemplated  a  $1,265,913  pay-down  of 
the  principal  balance  of  the  loan.  The  term  sheet  made  no  mention  of  a  $3.8  million  payment  from 
Cohen  to  any  other  form  of  payment  or  financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 


describing  the  teims  of  the  Cohen- \ 
not  mention  any  payments  from  Cohen  to 


transaction  and  the  new  loan  to  ^ 

includmg  a  $3.8  million  payment.  Hie 
memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medallion’Tbut  “itJs-reeognized-that  this  isJiot_in_line_witlLcurrentiJnarlcetJvalues.” _ Indeed. 


according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
2018,  taxi  medallions  sold  for  amounts  ranging  from  $120,000  to  $372,000.  According  to  Sterling 
Employee-1  and  Sterling  Employee-2,  they  were  never  told  that  agreed  to  a  purchase 

price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  make 
any  payment  to 

c.  On  or  about  January  30,  2018,  Sterling  Employee-3  asked  Cohen  whether  Cohen 


had  a  side  agreement  wifi 


Ito  pay  1 


sum  of  money  for  entering  into  the 


medallion  transaction.  Sterling  Employee-3  asked  Cohen  about  such  an  arrangement  because, 

Iras  paying  for  each  medallion 


according  to  Sterling  Employee-3,  the  price  that| 
appeared  to  be  well  above  the  market  price.  Cohen  stated,  in  sum  and  substance,  that  he  had  no 
side  agreement — ^and  never  had  a  side  agi’eement — ^with 


27.  While  Cohen  ana 


did  not  disclose  any  payment  from  Cohen  to 


communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  my  participation  in  an  interview 


2017.08.02 


37 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  46  of  201 

with  Getzel,  I  have  learned  the  following,  in  substance  and  in  part,  regai-ding  the  proposed  side 
payment  from  Cohen  to 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  “Getzel  Memorandum”). 
Tire  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and 
in  part,  as  follows:  ‘Michael  and  Laura  Cohen  will  transfer  ownership  of  theh  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  their  bank  indebtedness,  upon  the  [Cohens’]  paying  down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800,000.”^'^ 

_ ^^^b—According  to  Getzel^Cohenrtold  him  the-parameters  oJLthe„deal,_including_frie_ 

payment  of  $3,800,000  to  but  Getzel  did  not  know  where  Cohen  was  going  to  obtam 

$3,800,000  to  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 

cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Finmcial 
Statement  that  he  had  $  1 .25  million  in  cash. 

28.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 
with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterling 
(and  Mehose),  I  have  seen  no  evidence  that  Sterling,  Mehose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and  ^^^^^|vas  aware  of  the  planned  $3.8  million 

side  payment  from  Cohen  to 

The  Illegal  Campaign  Contribution  Scheme 

29.  The  US  AO  and  FBI  are  also  investigating  a  criminal  violation  of  campaign  finance 
laws  by  Michael  Cohen.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen  made 


The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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an  excessive  in-kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald 
Trump  in  the  fonn  of  a  $130,000  payment  to  Stephanie  Clifford,  an  individual  who  was  rumored 
to  have  had  an  extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that 
alleged  affair.  As  set  forth  below,  there  is  probable  cause  to  believe  that  this  payment  was  intended 
to  keep  Clifford  from  making  public  statements  about  the  rumored  affair  on  the  eve  of  the  2016 
presidential  election,  and  thus  constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 

30.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 


that-Tinmp  had-had  an  extramaiital-affamwith  Cliffordiran  adult-filmactress  whose 


screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supeiniarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occuired  between  Tinmp  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  1 1, 201 1,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 


regarding  Trump  and  Clifford  be  removed  fi'om  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Tnimp 
Organization,  stated  to  E!  News  that  “[t]he  totally  untrue  and  ridiculous  story  .  .  .  emanated  from 

a  sleazy  and  disgusting  website _ The  Tmmp  Organization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

31.  On  or  about  June  16,  2015,  Trump  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4,  2016,  Trump  became  the  presumptive  Republican  Party  nominee 
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for  president,  and  on  July  19,  2016,  Trump  officially  became  the  nominee.  Based  on  my  review 
of  public  soui'ces,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  18,  2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 

32,  On  or  about  October  7,  2016,  The  Washington  Post  published  online  a  video  and 
accompanying  audio  m  which  Trump  refened  to  women  in  what  the  article  described  as  “vulgar 
terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The 

-following-day^on-October  8,  2016,-Trump-appeared  in-a-videoJn-Which  he  stated,_among_ather_ 

things,  “Fve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  knows  me  loiows  these  words  don’t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that 
representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

33.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Slate 
magazine  by  a  reporter  who  interviewed  Clifford,  I  have  learned  that  around  this  same  time,  in  or 
about  October  2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  sliow  and 
Slate  magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement 
about  her  alleged  relationship  witli  Trump.  According  to  the  article  in  Slate,  which  the  author 
based  on  conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to 
be  paid  for  her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized 
in  a  201 8  email  obtained  pursuant  to  the  Cohen  Email  Warrants;  “In  October  2016, 1  was  contacted 
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by  counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  201 1 
story  of  an  alleged  affau*  between  Mr.  Trump  and  Ms.  Clifford.” 

34.  From  my  review  of  telephone  toll  records^^  and  information  produced  pursuant  to 
the  iCloud  Wan-ant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the^cce^^' 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 
Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer Tmmp,  and  Hope  Hicks,  who  was  then 
press  secretary  for  Trump’s  presidential  campaign.  Based  on  the  timing  of  these  calls,  and  the 
-content-oEthe  texCmessages-  and-emails,-I-believe_that  at  least_  some„oEthese^communicatifilis_ 
concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 2016,  at  approxhnately  7 :20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes. 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 


My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCai'd  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pursuant  to  the  iCloud  Warrant. 

Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
fiiend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transfeiTed  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Tnimp  spoke 
about  once  a  month  prior  to  this  date  —  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 
in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hides  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 

for  thu'ty^secondsw^pproximatelydour  minutes  lately  Cohen-ealled-Pecker-again-and-they-spoke 

for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
fi-om  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  finm  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  afl;er  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  fmm  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomoreow.”  Based  on  my  involvement  in  this  investigation,  I 
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believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:31  a.m.,  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake, 
please  call  my  cell.” 

f.  The  following  day,  on  October  1 0, 20 1 6,  at  1 0 : 5  8  a.m.,  Howard  sent  a  text  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regards  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 

opportunityrThanksrDylanTOver  toyou  two7^At-T2--2~5  punT^Davidson  sent  Cohen  a  text  message- 

that  stated:  “Michael  —  if  we  are  ever  going  to  close  this  deal  —  In  my  opinion,  it  needs  to  be  today. 
Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  fi'om  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.^* 

g.  Based  on  my  review  of  records  obtained  pui'suant  to  tlie  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  1 0, 20 1 6,  Clifford  and  Davidson  appear  to  have  signed  a  side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document. 

As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However,  because  these  communications  were  in  close  temporal  proximity  to  tire  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agi'eement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  Clifford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agi'eement  and  mutual  release.”  The  side  letter  agi'eement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  Dennison  s  identity 
is  blanlc.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 

■OctoberTOr2G16i - - - — ^ - - — 

35.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  fiinds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  First 
Republic,  as  well  as  my  participation  in  interviews  with  First  Republic  employees,  I  have  learned 
the  following: 

a.  On  the  morning  of  October  13, 2016,  at  8:54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 
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b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  Fii'st  Republic  Employee- 
2.  The  email  attached  documents  from  the  Secretaiy  of  State  of  Delaware  indicating  that  Cohen 
had  foiTued  a  Ihnited  liability  company  called  “Resolution  Consultants  LLC”  on  September  30, 
2016.  As  noted  above,  “Resolution  Consultants”  is  the  name  of  the  entity  that  Cohen  had  told 
Howard  he  had  formed  recently  after  Howard  said  Davidson  would  “do  it.”  At  10:44  a.m.,  Cohen 
called  First  Republic  Employee-2  and  told  hun,  in  sum  and  substance,  that  he  needed  an  aecount 
in  the  name  of  “Resolution  Consultants”  opened  immediately,  and  that  he  did  not  want  an  address 
on  the  checks  written  out  of  the  account.  Later  that  day,  another  employee  at  First  Republie 
-emailed  Cohen-accounLopening  paperwork-to-complete — Cohen  returaed  the  account-openings 
doeuments  partially  completed,  but  failed  to  provide  a  copy  of  his  driver’s  lieense  or  passport,  and 
did  not  respond  to  the  employee’s  question  of  how  he  wanted  to  fund  the  account.  As  a  result,  the 
aceount  was  never  opened. 

c.  On  October  17, 2016,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

36.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  elient,  Clifford, 
and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
iCloud  Warrant,  and  public  sources,  I  know  the  following: 

a.  Aceording  to  an  article  in  The  Washington  Post,  whieh  quoted  emails  sent  from 
Cohen’s  email  aeeount  hosted  by  the  Trump  Organization,  on  October  17, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.^^  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: 

i.  At  4:43  p.m.,  Howai'd  sent  Cohen  a  text  message  that  stated:  “I’m  told 

they^re'going  with  DailyMailT^Are  you  aware?”  One  minute-lateiyCohen  responded:  Gall-me. 


Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affau  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  eall  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  pjtn.,  Cohen  texted  Howard,  stating;  “Well???” 

V.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating;  “Not  talcing  my 

calls.”  Cohen  responded  one  minute  later:  “You’re  Iddding.  Who  are  you  hying  to  reach?” 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  USAO  has  not  requested 
documents  from  the  Tmmp  Organization  or  Davidson,  and  thus  does  not  possess  the  email 
referenced  in  this  article. 
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investigation,  I  understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes, 
c.  The  following  day,  on  October  18,  2016,  TheSmoJdngGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called;  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 
article  noted  that  Clifford  had  declined  to  comment. 

37.  On  or  about  October  25,  2016,  the  communications  between  Cohen,  Davidson, 

Howard  and'Pecker-picked  up-againrapparently  conceming^-transaetionAnvolving-Gliffordv- 

Specifrcally,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email 
Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 
minutes.  At  7:1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26,  2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Tinmp  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9:04  a.m.^ — less  than  thirty  minutes  after  speaking  with  Tmmp — 
Cohen  sent  two  emails  to  the  person  who  had  incoiporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
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email,  “for  Essential  Consultants  LLC  ”  That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  First  Republic  Employee-2  and  told  him,  in  sum 
and  substance,  that  he  decided  not  to  open  an  account  in  the  name  of  Resolution  Consulting  and 
instead  would  be  opening  a  real  estate  consulting  company  in  the  name  of  Essential  Consultants. 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Trump  Tower,  and  wanted  to  go  to  a  First 
Republic  branch  across  the  sfteet  to  open  the  account,  so  First  Republic  Employee-2  called  First 
Republic  Employee-1,  a  preferred  banker  at  that  branch,  assist  Cohen.  At  11:00  a.m.,  Fii'st 

-Republic”Employee-l  ealled-eohen— I  Imow  from-my-paptieipation-in  an-interviewwvith  First- 

Republic  Employee-1,  that  around  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower — 
on  the  same  floor  as  the  Trump  Organization — and  went  through  account  opening  questions, 
including  know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account— the  answers  to  which  First  Republic 
Employee- 1  entered  into  a  form — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  areal  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based  on  my  review  of  records  obtained  fi'om  First  Republic,  it  appears  that  this  account  (the 
“Essential  Consultants  Account”)  was  created  at  a  time  between  1 1:00  a.m.  and  1:00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Bank. 

£  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
ti-ansferred  $131,000  fi'om  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
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Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4: 1 5  p.m.  on  October  26, 
2016,  Fii-st  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
and  connected  for  about  thufy  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 

for  nearly"thirteen-minutes7  Af  7i24-pTm.~Howai-d  sent  a-text-message  to  Cohen  that4~^He-said 

he’d  call  me  back  in  20  minutes.  I  told  him  what  you  ai'e  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  aecount.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agi'eement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  coiTect  LLC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agi'eement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 

38.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000 — ^with  the 
funds  intended  for  Clifford— for  the  purpose  of  seeuring  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
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toll  records,  bank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen 

Email  Wairants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confmn  that 
the  wh-e  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  tnist  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  LLC.  I  thank  you  in  advance  for 
your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 

BankT^Coheirconipleted  paperwork  to  wire“$l'3  0^000  fromAhe  EssentiaFGonsultants-Aeeount 

which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit— to  the  attorney  client 
tmst  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  fi-om  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  coirect  corporation,  (Essential  Consultants  LLC). 
Plaintiff’s  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  10:50  a.m.,  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 

39.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction 
with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant 
to  the  iCloud  Warrant,  public  sources,  and  bank  records,  I  know  the  following: 
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a.  On  October  28, 20 1 6,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 

message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  ai'e  veiy  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  pavidson]  says 
we  ai*e  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
'app^unately  l'OTSOll.m:;  Cohen  spokeAo'Hicks'for  to  '  * 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  fi-om  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosm'e  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  comt  filings  that  became  public  m  20 1 8, 1  have  learned  that 
on  or  about  Oetober  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  Peterson 
agreed  not  to  disclose  certain  “confidential  inforaiation  pertaining  to  Pennison]”  in  exchange  for 
$130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  fluids  to  “Peterson’s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  EC, 
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LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  refeired  to  in  the 
agi'eement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transfeited  $96,645  from  his  attorney  client  frust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  aimotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  aiiived  for  Cohen  at  his  Trump  Organization 

'addressT^On  tlie  same~dayrat  approximatel5<^6:L4“p;mTrDavidson  senCCoheman  email  with-an- 

audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

40.  On  November  4, 20 1 6,  just  thi-ee  days  after  the  Clifford  transaction  was  completed 
and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an  aiticle 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Tmmp”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
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Based  on  my  review  of  toll  records,  infoimation  obtained  pursuant  to  the  Cohen  Email  Wairants 
and  iCloud  Warrant,  and  public  soui'ces,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — -just  days  before  Election 
Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
fraction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent  Howard 
a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump  Organization 

lawyerr-The  forwarded  emaiTwas"fi-om  a  Wall  Street-JoumaFreporterrand  asked-for  comment 

fi'om  Tmmp  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  um-eachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don  t 
want  to  push  her  over  the  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
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plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howai'd  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
‘Tm  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated  he  s 
pissed.”  Cohen  asked  Howard  at  approxhnately  9:00  p.m.  how  the  Wall  Street  Journal  could 

publish  its  article  if““everyone  denies7”  Howard"  responded7--43eeause-there  is-the  payment  flom 

AMI.  It  looks  suspicious  at  best.” 

d.  At  approxhnately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  stoiy  came  across.  The  next 
morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  So  far  I  see  only 
6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying!!  It’s  worldng!” 
Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
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statement  by  Storm  denying  everything  and  contradicting  the  other  pom  stars  statement.  I  wouldn’t 
use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on  my 
involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced  recorded 
audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a  statement 
could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but  was  unnecessary  at  that 
time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that  morning.  Pecker 
spoke  to  Trump. 

41 .  On  or  about  November  8, 2016,  Trump  won  the  election  for  President  of  the  United 

"States.  ^ 

42.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  government 
watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
have  learned  the  following; 

a.  On  or  about  January  23,  2018,  the  day  after  Coimnon  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pm-suing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  breaking.  I  Icnew  the  allegation  to  be  false,  h\Al  am 
also  a  realist  who  understands  that just  because  something  is  false  doesn  t 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
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occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  fi'om  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Tmmps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  (  ...the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  brealdng”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  hun,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  I  can  t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “hi  a  private  transaction  in  2016, 1  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Mis.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 
directly  or  induectly.” 

43 .  On  or  about  March  9,2018,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 

from  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.” 
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44.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that 
Cohen  committed  violations  of  the  Campaign  Finance  Offenses  by  maldng  an  in-kind  contribution 
to  Trump  or  the  Tinmp  campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the 
election.  Indeed,  while  he  denies  having  given  an  unlawful  contribution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $130,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment 
occuiTed  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
about  his  behavior  toward  women,  even  tliough  allegations  of  an  affair  between  Trump  and 
Clifford  existed  since  2011.  In  addition,  the  communication  records  set  forth  above  make  evident 

tharCoheircommunrcated^with^inembers-ofothe-Truinp  cainpaign  about  his-negotiation  with 

Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

C.  Probable  Cause  Justifying  Search  of  the  Subject  Premises  aud  Subject  Devices 

45 .  Based  on  the  foregoing,  my  review  of  records  produced  pursuant  to  subpoenas  and 
the  Cohen  F.mail  Warrants,  and  the  iCloud  Warrant,  and  my  training  and  experience,  there  is 
probable  cause  to  believe  that  the  Subject  Premises  and  Subject  Devices  have  been  used  in 
firrtherance  of  the  Subject  Offenses  and  are  likely  to  contain  instrumentalities,  evidence,  and  fiiiits 
of  the  Subject  Offenses.  Specifically,  there  is  probable  cause  to  believe  that  Cohen  permanently 
resides  at  Subject  Premises-1  and,  at  least  in  part,  works  at  both  Subject  Premises-1  and  Subject 
Premises-2,  and  that  those  locations  contain  evidence  relating  to  the  Sterling  taxi  medallion 
transaction,  Cohen’s  assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his 
payment  to  Clifford.  Additionally,  there  is  probable  cause  to  believe  that  Subject  Premises-3 
contains  evidence  of  Cohen’s  assets  and  his  payment  to  Clifford.  Finally,  there  is  probable  cause 
to  believe  that  Subject  Premises-4,  in  which  Cohen  is  temporarily  residing,  contains  electronic 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which,  in  turn,  contain  evidence  of  the 
Subject  Offenses,  such  as  evidence  relating  to  the  Sterling  taxi  medallion  transaction,  Cohen’s 
assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his  payment  to  Clifford. 

46.  First,  there  is  probable  cause  to  believe  that  Cohen  lives  and  operates  his  businesses, 
at  least  in  part,  at  Subject  Premises-1 .  Specifically,  from  my  review  of  property  records,  I  know 
that  Michael  Cohen  and  Laura  Cohen  own  (in  trust)  Subject  Premises-1.  From  my  review  of 
Cohen’s  tax  returns,  I  know  he  lists  his  primary  residence  as  Subject  Premises-1.  Additionally, 
from  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 

Routinely  refers  to  Subject  Pfernises^r^hi^home.  For  eXWplerotnJraboutSeptember  28 

and  October  6,  2017,  Cohen  emailed  individuals  that  his  home  address  is  tlie  address  for  Subject 
Premises-1.  I  also  know  from  my  review  of  emails  that  Cohen  receives  package  delivery 
notifications  that  list  Cohen’s  address  as  the  address  for  Subject  Premises-1.  Cohen  has  also 
provided  the  address  of  Subject  Premises-1  as  the  address  for  Essential  Consultants  and  Michael 
D.  Cohen  &  Associates,  P.C.  For  example,  the  certificates  of  incorporation  and  account  opening 
documents  at  Ffrst  Republic  for  both  entities  list  their  addresses  as  the  address  for  Subject 
Premises-1.  See  supra  1 8(b),  1 8(d).  The  consulting  agi-eement  between  Essential  Consultants 
and  AT&T  also  indicated  the  address  for  Essential  Consultants  is  the  address  for  Subject  Premises- 
See  supra\\9(c). 

47.  There  is  also  probable  cause  to  believe  that  Subject  Premises-1  is  lilcely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Wari'ants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  following: 
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a.  According  to  records  maintained  by  Sterling,  the  address  for  all  of  Cohen’s  taxi 
medallion  LLCs  is  the  address  for  Subject  Premises-1.  See  supra  Tf  16(c).  Additionally,  the 
medallion  loan  documents  indicate  that  any  mailings  related  to  the  loans  should  be  sent  to  Subject 
Premises- 1 .  See  id.  Based  on  my  training  and  experience,  as  well  as  my  review  of  public  soui'ces, 

I  know  that  individuals  keep  records  of  properties  and  assets  in  which  they  have  oAAUieiship 
interests.  Accordingly,  I  submit  that  Subject  Premises-1  lilcely  contains  evidence  of  Cohen’s 
ownership  of  the  taxi  medallion  LLCs,  the  revenue  that  those  medallions  generate,  and  the 
transaction  with  Sterling  in  20 1 4  to  re-fmance  the  medallion  loans  that  were  then  with  Capital  One 
Bank. 

b.  From  my  review  of  records  maintained  by  Sterling,  I  also  know  that  Sterling 

addressed  documents  relating  to  the^^^^^^^^Jtransaction  and  Cohen  s  attempts  to  modify  the 
terms  of  the  medallion  loans  to  Subject  Premises-1.  For  instance.  Sterling  addressed  the 
transaction  term  sheet,  see  supra  ^  1 6(1),  and  its  demand  letter  and  notice  of  default,  see  supra  T[ 
16(q),  to  Subject  Premises-l.  Accordingly,  Subject  Premises-1  likely  contains  evidence 
concerning  the  transaction  and  Cohen’s  negotiations  with  Sterling.  Some  of  those 

records — such  as  records  relating  to  a  payment  fi-om  Cohen  to^^^^^^|-were  concealed  from 
Sterling  and  cannot  be  obtained  via  subpoena  to  Sterling.  Additionally,  even  where  documents 
were  sent  to  Cohen  by  Sterling  (and  therefore  are  available  from  Sterling  via  subpoena),  the  fact 
that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to  Cohen’s  possession  or  knowledge 
of  the  documents. 

c.  From  my  I'eview  of  records  maintained  by  First  Republic,  I  loiow  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  addi'esses  for  the  Essential  Consultants 
Account  and  MDC&A  Account.  See  supra  1 8(b),  1 8(e).  Accordingly,  it  is  likely  that  Subject 
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Premises- 1  contains  records  relating  to  the  Essential  Consultants  Account  and  MDC&A  Account, 
including,  among  other  things,  account  opening  documents,  bank  statements,  documents  provided 
as  part  of  the  know-your-customer  process,  airy  notes  made  by  Cohen  when  he  was  opening  the 
accounts,  wire  transfer  records,  and  canceled  checks.  Even  where  these  records  can  be  obtained 
from  First  Republic,  the  fact  that  they  may  be  found  m  Subject  Premises- 1  will  be  relevant  to, 
among  other  things,  Cohen’s  ownership  of  the  accounts,  or  his  Icnowledge  of  transactions  or  the 
existence  of  funds  in  accounts. 

d.  Based  on  my  review  of  records  maintained  by  Capital  One  Bank,  TD  Bank,  Morgan 
Staffle3^Ci^MtiMal  Baidc,  Stgffatra*e~Bank,-and  Bethpage- Credit  UnionrFknow^  to 
provided  the  address  for  Subject  Premises- 1  as  the  mailing  for  his  accounts  at  each  of  these 
financial  institutions.  Accordingly,  it  is  likely  that  Subject  Premises-1  contains  records  lelating  to 
these  accounts,  including,  among  other  things,  banlc  statements  that  list  account  balances.  The 
existence  of  these  records  in  Subject  Premises-1  will  be  relevant  to,  among  other  things,  Cohen  s 
ownership  of  the  accounts  and  his  Icnowledge  of  the  balances  in  these  accounts. 

e.  Additionally,  Cohen  may  have  records  of  other  bank  accounts  or  assets  that  were 
not  disclosed  to  Sterling  and  are  not  presently  Icnown  by  law  enforcement.  For  example,  as 
described  above,  Cohen  has  received  interest  income  smce  2015  that  he' has  not  disclosed  to 
Sterling  or  paid  taxes  on.  Also,  on  Cohen’s  August  2014  Financial  Statement,  ses  supfci  ^  16(e), 
he  disclosed  $10,000,000  in  “investments  in  overseas  entities.”^®  The  value  of  these  investments 
was  omitted  from  subsequent  financial  statements.  However,  for  the  reasons  outlined  above,  there 
is  probable  cause  to  believe  that  Cohen  omitted  the  value  of  those  investments  from  his  2017 

Based  on  my  participation. in  an  interview  with  Sterling  Employee-3,  I  have  learned  that 
Cohen  told  Sterling  Employee-3  that  the  reference  to  “investments  in  overseas  entities”  on  his 
2014  Financial  Statement  was  to  serve  merely  as  a  “placeholder”  for  potential  fixture  investments. 
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financial  statements  in  order  to  understate  his  assets.  As  Subject  Premises- 1  is  Cohen’s  primary 
residence  and  he  uses  Subj  ect  Pi'emises- 1  as  the  mailing  address  for  banlc  records,  there  is  pi  obable 
cause  to  believe  that  account  statements  for  unlaiown  banlc  accounts  or  assets  concealed  from 

Sterling  are  lilcely  to  be  found  in  Subject  Premises-1. 

f.  Based  on  my  review  of  records  maintained  by  AT&T  and  produced  pursuant  to  the 
Cohen  Email  Warrants,  I  Icnow  that  the  address  Cohen  provided  to  AT &T  for  Essential  Consultants 
is  the  address  for  Subject  Premises-1.  See  supra  f  19(c).  Therefore,  there  is  probable  cause  to 
believe  that  Subject  Premises-1  will  contain  evidence  concerning  the  operation  of  Essential 

ICor^uitents^or  n^  that  CoHefr  ffrceiWdTThi-ouglT^Essential  Consultantsr”from~AT&TT- 

Additionally,  because  Cohen  used  the  address  for  Subject  Premises-1  for  at  least  one  consulting 
arrangement  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  may  contain  records  of  other  consulting  aiTangements  that  Cohen,  through  Essential 

Consultants,  has  with  other  individuals  or  entities. 

g.  Based  on  my  review  of  records  maintained  by  GetzeTs  accounting  firm,  and  emails 
produced  pui-suantto  the  Cohen  Email  Warrants,  I  have  learned  that  GetzeTs  accounting  firm  sent 
documents  to  Subject  Premises-1  and  used  the  address  for  Subject  Premises-1  as  the  address  listed 
on  Cohen’s  personal  and  corporate  tax  retains.  See  supra  f  16(n).  For  instance,  on  or  about 
October  6,  2017,  an  employee  at  GetzeTs  accounting  firm  emailed  Cohen  that  she  had  sent 
Cohen’s  September  2017  Financial  Statement  by  FedEx  to  Cohen’s  attention.  Accordingly, 
Cohen’s  tax  records  are  likely  to  be  found  in  Subject  Premises-1. 

h.  Based  on  my  review  of  bank  records  and  publicly-available  documents,  I  know  that 
Cohen  used  $130,000  from  a  home  equity  line  of  credit  on  Subject  Premises-1  to  pay  Clifford.  I 
also  know  that  on  the  settlement  and  nondisclosure  agi-eement  between  “Peggy  Peterson”  and  EC, 
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LLC,”  the  address  for  Essential  Consultants  is  Subject  Premises- 1.  Accordingly,  Subject 
Premises- 1  is  lilcely  to  contain  evidence  of  the  Campaign  Finance  Offenses,  including  settlement 
and  nondisclosure  agreements,  payment  recoi'ds,  written  and  email  correspondence,  and  records 

pertaining  to  the  home  equity  line  of  credit. 

i.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Wari'ants  and 
iCloud  Warrant,  I  know  that  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini,  and  a 
MacBookPro  to  access  his  iCloud  account.  Based  on  my  review  of  location  records  provided  by 
Apple  pursuant  to  the  iCloud  WaiTant,  I  know  that  electronic  devices  linked  to  Cohen’s  iCloud 

“^FcbunrwefeWd^SubjectPfemrs"es^l  tw^ong  other  thing 

files  to  Cohen’s  iCloud  account.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  contains  electronic  devices,  including  certain  Apple  products,  that  for  reasons 
discussed  below  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

j.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Wairants,  I 
understand  that  Subject  Premises-1  recently  sustained  water  damage  to  certain  parts  of  the 
premises,  and  that  Cohen  has  engaged  confactors  to  perform  certain  remediation  work  on  the 
premises.  In  addition,  as  set  forth  above,  I  believe  that  Cohen  and  his  family  are  temporarily 
residing  at  Subject  Premises-4  in  the  Loew’s  Regency  Hotel,  which  is  approximately  two  blocks 
fi'om  Subject  Premises-1.  However,  based  on  my  review  of  a  work  order  sent  to  Cohen’s  email 
by  a  contractor,  I  understand  that  the  first  phase  of  the  work  order  called  for  the  contractor  to  “Pack 
&  Remove  all  items  &  fumisliings  in  Living  Room,  Kitchen,  Sons  Room  &  Dining  Room”  and 
store  them  off-site.  In  addition,  based  on  my  review  of  drawings  sent  to  Cohen  by  the  contractor, 
it  appears  that  the  work  is  primarily  being  done  in  these  rooms.  Thus,  I  believe  that  the 
construction  -  to  the  extent  it  is  still  ongoing  -  would  not  necessarily  have  caused  Cohen  to  move 
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all  documents  or  evidence  responsive  to  the  warrant  out  of  Subject  Premises-1,  because  it  does  not 
appear  that  work  is  being  done  to  the  portion  of  Subject  Premises-1,  such  as  a  home  office  or 
Cohen’s  own  room,  where  such  documents  or  evidence  would  most  lilcely  be  found.^^ 

48.  Second,  there  is  probable  cause  to  believe  that  Cohen  uses  Subject  Premises-2  as 
office  space,  and  also  that  Subject  Premises-2  contains  certain  electronic  devices.  Specifically, 
from  my  review  of  the  “strategic  alliance  agreement”  between  Squire  Patton  Boggs  and  Cohen, 
and  my  review  of  the  press  release  on  Squire  Patton  Boggs’s  website,  I  know  that  Cohen  has  an 
office  at  Subject  Premises-2.  See  supra  fl  18(d),  19(e).  Indeed,  I  have  learned  that  pursuant  to 

“Cohen’s  agreemenTwithrth^lWfinrh'he^has  “dedicated-and  segregated  office-space  in  Squire 

Patton  Boggs’s  offices  on  the  23rd  floor  of  30  Rockefeller  Plaza,  and  that  the  space  is  “physically 
sepai-ate”  fr'om  the  firm’s  offices  and  has  “locked  doors  and  its  own  locked  file  cabinets.”  See 
supra  T[  19(e).  Additionally,  I  know  that  under  the  terms  of  the  agreement,  Cohen  agreed  to 
“arrange  for  [his]  own  computer  seiwer  system  that  is  not  connected  to  [Squire  Patton  Boggs’s] 
computer  network  system.”  I  Icnow  from  my  paificipation  in  an  interview  with  Getzel,  who  met 
Cohen  at  Subject  Premises-2  in  2017,  that  Subject  Premises-2  is  an  office  with  a  door,  it  appeal's 
to  be  used  only  by  Cohen,  and  it  contains,  among  other  things,  a  computer  and  paper  files. 
According  to  Getzel,  when  Getzel  saw  Cohen  at  Subject  Premises-2,  he  had  two  cellular 
telephones  in  Subject  Premises-2.  I  also  Icnow  from  my  review  of  emails  produced  pursuant  to  the 
Cohen  Email  Warrants  that  Cohen  uses  the  address  for  Subject  Premises-2  in  the  signatoe  block 

As  noted  below,  based  on  my  training  and  experience,  I  believe  that  individuals  who  travel  or 
stay  in  hotels  for  short-term  periods  commonly  bring  some  items  with  them,  such  as  poi-toble 
electronic  devices  or  sensitive  items,  meaning  that  Cohen  has  likely  talcen  some  evidence  from 
Subject  Premises-1  to  Subject  Premises-4.  Nevertheless,  given  the  temporaiy  natoe  of  Cohen  s 
stay  at  Subject  Preniises-4  and  the  scope  of  the  work  being  done  at  Subject  Premises-1, 1  believe 
it  is  unlikely  that  Cohen  has  taken  all  evidence  that  would  be  subject  to  seizure  out  of  Subject 
Premises-1. 
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on  his  emails.  Based  on  my  review  of  notes  of  a  call  between  Cohen  and  First  Republic  Employee- 
2  (which  notes  were  taken  by  another  First  Republic  employee,  who  was  participating  in  the  call 
and  taking  notes),  I  Icnow  that,  on  or  about  November  15,  2017,  Cohen  told  First  Republic 
Employee-2  that  he  had  a  new  office  at  3  0  Rock.  Moreover,  I  know  from  an  article  in  Vanity  Fair 
published  on  or  about  February  14,  2018,  that  Cohen  was  interviewed  by  the  magazine  in  Subject 
Premises-2  in  or  about  February  2018, 

49.  There  is  also  probable  cause  to  believe  that  Subject  Premises-2  is  likely  to  contain 
insfrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  fi'om  my  review  of 

eimils  producedjpumuMifto^^  and  the^Cohen  EmaiTWarrants  and  iCloud  Warranfr  as  well— 

as  my  training  and  experience,  I  know  the  following: 

a.  According  to  records  maintained  by  Sterling,  when  Cohen  was  emailing  with 
Sterling  Employee-3  in  2018  about  a  modification  to  his  existing  loan  from  Sterling,  Cohen  listed 
his  address  in  his  email  as  the  address  for  Subject  Premises-2.  See  supra  f  16(t),  16(u). 
Accordingly,  Subject  Premises-2  likely  contains  evidence  concerning  Cohen’s  loan  modification 
negotiations  with  Sterling. 

b.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  the  address  Cohen  provided  to  KAI  and  BTA  for  Essential  Consultants  is  the  addi-ess 
for  Subject  Premises-2.  See  supra  HI  19(a),  19(b).  Therefore,  there  is  probable  cause  to  believe 
that  Subject  Premises-2  will  contain  evidence  concerning  the  operation  of  Essential  Consultants 
or  money  that  Cohen  received,  through  Essential  Consultants,  from  KAI  and  BTA,  among  other 
entities  with  which  Cohen  had  a  consulting  arrangement.  Additionally,  based  on  my  review  of 
emails  sent  in  2018  that  were  obtained  pnrsnant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
continues  to  enter  into  consulting  aiTangements  through  Essential  Consultants,  and  agreements 
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relating  to  those  arrangements  indicate  that  Essential  Consultants  is  located  at  Subject  Premises- 
2.  Additionally,  because  Cohen  used  the  address  for  Subject  Premises-2  for  multiple  consulting 
arrangements  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-2  may  contain  records  of  other  unlaiown  consulting  arrangements  that  Cohen  has  with 
other  individuals  or  entities. 

c.  Based  on  my  review  of  records  maintained  by  Getzel’s  accountmg  firai,  and  emails 
produced  pursuant  to  the  Cohen  Email  Wanunts,  as  well  as  my  participation  in  an  interview  with 
Getzel,  I  have  learned  that  Getzel  visited  Subject  Premises-2  to  meet  with  Cohen  about  his  taxes. 

"S'ge“SZ^fl1[  20(ay-'7^t  ffiatTneetmg,  Getzel-discussed-with  Cohen  whether- Cohen  should  disclose- 
Essential  Consultants  on  his  personal  financial  statement  to  banks.  According,  there  is  probable 
cause  to  believe  that  Subject  Premises-2  will  contain  evidence  relating  to  Cohen’s  taxes,  or  notes 
of  his  conversation  with  Getzel.  Moreover,  the  fact  that  Cohen  used  Subject  Premises-2  for  a 
meeting  regarding  his  personal  financial  matters  provides  probable  cause  to  believe  that  documents 
and  information  regarding  his  finances  will  be  found  in  Subject  Premises-2. 

d.  Based  on  my  participation  in  an  interview  with  Getzel,  I  know  that  Cohen  maintains 
a  computer  in  Subject  Premises-2.  From  my  review  of  IP  data  produced  pursuant  to  a  subpoena 
and  pen  register  to  Google,  it  appeal's  that  Cohen  is  logging  into  his  Gmail  account  from  Subject 
Premises-2.  Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-2  contains 
electronic  devices,  that  for  reasons  discussed  below  are  likely  to  contain  evidence  of  the  Subject 
Offenses. 

e.  Based  upon  my  training  and  experience,  I  have  learned  that  individuals  who 
maintain  businesses  typically  keep  records  relating  to  the  business — such  as  contracts  with  clients 
and  records  of  payments^ — at  the  busmess’  identified  location.  I  am  not  aware  of  any  addresses 
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associated  with  Essential  Consultants  other  than  Subject  Premises-1  and  Subject  Premises-2. 
Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-1  and  Subject  Premises-2 


will  contain  business  recoi'ds  for  Essential  Consultants. 

50.  Third,  there  is  probable  cause  to  believe  that  Subject  Premises-3  is  likely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  In  particular: 

a.  As  noted  above,  Cohen  has  two  bank  accounts  at  TD  Bank.  In  or  about  November 


20 1 7,  as  Cohen  was  receiving  substantial  income  from  consulting  work — which  he  did  not  disclose 
to  Sterling — Cohen  opened  the  safety  deposit  box  at  TD  Bank,  which  is  Subject  Premises-3.  In 

light  of  theTforementibned  evidericertharCohen  conceals”a^ssetsrmcluding-assets  at-TD-Bank, 

there  is  probable  cause  to  believe  that  Subject  Premises-3  contains  financial  assets,  objects  of  value 
and/or  docmnents  relating  to  such  assets  or  objects  of  value  that  Cohen  likely  did  not  disclose  to 


Sterling.  Indeed,  based  on  my  fraining  and  experience,  I  am  aware  that  people  often  conceal 
valuable  items  in  safety  deposit  boxes.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 


Premises-3  will  contain  evidence  of  the  Bank  Fraud  Offenses. 

b.  In  addition,  based  on  my  review  of  records  produced  by  TD  Bank,  I  know  that 
Cohen  has  accessed  the  vault  in  which  Subject  Premises-3  is  stored  on  two  occasions.  The  first 
such  occasion  was  on  November  10,  2017.  Cohen  signed  into  the  vault  at  approximately  5:35  and 
out  of  vault  at  approximately  5:39  on  that  date.^^  g^sed  on  my  review  of  toll  records,  I  loiow  that 
Cohen’s  first  call  after  he  signed  out  of  the  safety  deposit  box  -  approximately  45  minutes  later  - 
was  to  Keith  Davidson.  Specifically,  at  6:25  p.m.  Cohen  called  Davidson  and  they  spoke  for  less 
than  a  minute;  three  minutes  later,  Davidson  called  Cohen  back  and  they  spoke  for  approximately 


The  entry  in  the  bank’s  log  book  does  not  specify  whether  this  is  A.M.  or  P.M.  However,  I  infer 
that  it  is  P.M.,  because  it  is  unlikely  that  the  bank  would  have  been  open  at  5:35  and  5:39  a.m. 
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22  minutes.  The  second  such  occasion  was  on  Februaiy  2,  2018,  wliich  is  during  the  time  period 
numerous  media  reports  about  Cohen’s  payment  to  Clifford  were  being  published,  and  is  one  day 
after  it  appears  that  Cohen’s  family  moved  into  Subject  Premises-4,  as  set  forth  above.  The  timing 
of  Cohen’ s  two  visits  to  the  vault  -  one  shortly  before  a  call  to  Keith  Davidson  and  the  other  ai  ound 
the  time  that  Cohen  came  under  media  scrutiny  in  connection  with  the  payment  to  Davidson  s 
client-  gives  rise  to  probable  cause  to  believe  that  Subject  Premises-3  will  contain  evidence  of  the 
Campaign  Finance  Offenses,  such  as  documents  relevant  to  the  Cohen’s  dealmg  with  Keith 
Davidson  and  the  payment  to  Clifford,  including  documents  or  evidence  that  Cohen  did  not  want 
to  leave  in  his  apartment  where  constmcfion  workers  would  be  presentr 

5 1 .  Based  on  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email  Warrants  and 
cell  phone  location  information,  I  believe  that  Cohen  is  temporarily  residing  in  Subject  Premises- 
4.  See  supra  3(d).  There  is  also  probable  cause  to  believe  that  Subject  Premises-4  contains 
instrumentalities  and  evidence  of  the  Subject  Offenses,  including,  the  following. 

a.  As  described  above,  it  appears  that  Cohen  moved  to  Subject  Premises-4  on  or  about 
February  1,  2018,  at  which  time  numerous  media  reports  about  Cohen’s  involvement  in  the 
payment  to  Clifford  were  being  published.  See  supra  'ft  3(d).  During  this  time  same  period, 
Cohen  was  frequently  corresponding  with  the  media  and  sent  himself  and  others  statements  about 
his  involvement  in  the  payment  to  Clifford.  supra  42(a)-(c).  Thus,  there  is  probable  cause 
that  Cohen  took  at  least  some  documents  and  evidence  relating  to  the  Clifford  payment  with  him 
to  Subject  Premises-4,  in  order  to  reference  and  consult  them  in  connection  with  these  statements. 

33  As  noted  above.  Subject  Premises-3  is  approximately  five  inches  by  ten  inches.  Accordingly,  I 
do  not  believe  that  it  would  fit  a  large  volume  of  hard  copy  documents;  however,  a  small  number 
of  hard-copy  documents,  or  a  large  volume  of  documents  contained  on  a  flash  drive  or  other 
portable  storage  device,  would  fit  in  Subject  Premises-3. 
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b.  As  described  above,  at  the  time  Cohen  moved  to  Subject  Premises-4,  he  was  also 


in  the  midst  of  ongoing  negotiations  with  Sterling  regarding  the  refinancing  of  his  medallion  debts. 


For  example,  on  January  30, 201 8,  Cohen  had  a  lengthy  phone  call  with  Sterling  Employee-3  about 
his  finances  and  the  proposed  restructuring,  and  on  February  1,  2018,  Cohen  sent  an  email  to 
Sterling  Employee-3  claiming  that  he  did  not  have  more  than  $1.25  million  in  cash.  See  supra  Td 
1 6(u).  Thus,  there  is  probable  cause  that  Cohen  took  at  least  some  documents  and  evidence  relating 


to  his  ongoing  negotiations  with  Sterling  with  him  to  Subject  Premises-4,  in  order  to  reference  and 
consult  them  in  connection  with  these  negotiations. 

'  C.  As  described'abb^CbhetrusMWl^ron^Awle“iPhone7an-Appfe^^ 


and  a  MacBook  Pro  to  access  his  iCloud  account,  and  these  electronic  devices  linked  to  Cohen’s 
iCloud  account  were  used  at  Subject  Premises- 1  —  Cohens’  permanent  residence  —  to  place 
telephone  calls  and  baclmp  files  to  Cohen’ s  iCloud  account.  See  supra  47(i).  Although  Cohen’s 
stay  at  Subject  Premises-4  is  temporary,  based  on  my  training  and  experience  I  know  that 
individuals  who  travel  or  stay  in  hotels  for  short-teim  periods  commonly  bring  portable  electronic 
devices  with  them,  such  as  cellular  phones,  tablets,  or  laptops.  Accordmgly,  there  is  probable 
cause  to  believe  that  Subject  Premises-4,  where  Cohen  currently  appears  to  be  residing,  contams 


electronic  devices,  including  Subject  Device-1,  Subject  Device-2,  and/or  ceidain  Apple  products. 


that  for  the  reasons  discussed  herein  are  likely  to  contain  evidence  of  the  Subject  Offenses. 


d.  Moreover,  as  set  forth  above,  based  on  cellphone  location  information  I  know  that 
Subject  Device-1  and  Subject  Device-2  were  in  the  vicinity  of  Subject  Premises-4  as  recently  as 
this  morning  (April  8,  2018).  As  set  forth  above,  there  is  probable  cause  to  believe  that  Cohen 
used  the  Subject  Devices  in  furtherance  of  the  Subject  Offenses,  including  to  communicate  with 
Sterling  employees  regarding  the  medallion  transaction,  with  First  Republic  employees  regarding 
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the  Essential  Consultants  Account,  with  his  accountant  regai'ding  his  finances,  and  with 
individuals,  such  as  Davidson,  Howai'd  and  Pecker,  involved  in  the  $130,000  payment  to  Clifford. 

52.  Although  Cohen  appears  to  be  residing  currently  in  Subject  Premises-4,  it  is 
unknown  whether  Cohen  will  be  physically  present  within  Subject  Premises-4  at  the  moment  the 
warrant  sought  herein  are  executed.  If  Cohen  is  within  Subj  ect  Premises-4  at  that  moment.  Subject 
Device- 1  and  Subject  Device-2  -  his  cellphones  -  will  lUcely  also  be  within  Subject  Premises-4. 
If  Cohen  is  not  within  Subject  Premises-4  at  that  moment,  the  devices  will  lilcely  be  on  his  person, 
wherever  he  is  located  (which,  based  on  location  data  for  Subject  Device-1  and  Subject  Device-2 
as  recently  as"  todayri^liKely^to  b^in  the^Stmthem  District'ofNeW7York)r~As  such,^^A^ 
seelcs  separate  authority  to  seize  Subject  Device- 1  and  Subject  Device-2,  in  the  event  that  those 
devices  are  not  located  within  Subject  Premises-4  (or  another  Subject  Premises)  at  the  moment  the 
wan'ants  sought  herein  are  executed. 

D.  Probable  Cause  Justifying  Search  of  ESI 

53.  Based  on  the  foregoing,  there  is  probable  cause  to  believe  that  Subject  Premises-1, 

Subject  Premises-2  and  Subject  Premises-4  contain  electronic  devices  that  are  lilcely  to  contain 
evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses  (and,  as  set  forth  above,  that  Subject 
Device-1  and  Subject  Device-2  are  themselves  electronic  devices  that  are  likely  to  contain 
evidence  of  the  Subject  Offenses).  Specifically,  based  on  my  review  of  information  produced 
pursuant  to  the  Cohen  Email  Warrants,  the  iCloud  Warrant,  and  subpoenas,  as  well  as  pen  register 
data,  I  submit  tliat  there  is  probable  cause  that  Subject  Premises-1  contains  an  Apple  iPad  Mini,  a 
MacBook  Pro,  and  has,  at  various  tunes,  contained  Apple  cellphones;  similaify,  there  is  probable 
cause  that  Subject  Premises-2  contains  a  computer  and  has,  at  various  times,  contamed  Apple 


2017.08.02 


69 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  78  of  201 


cellphones.  These  devices  are  likely  to  include  evidence,  fruits,  and  instrumentalities  of  the 

Subject  Offenses  for  the  following  reasons: 

a.  As  described  throughout  this  affidavit,  Cohen  used  email  to  send  and  receive 
communications  related  to  the  Subject  Offenses.  In  particular,  Cohen  used  email  to  send  and 
receive  communications  with  Sterling,  First  Republic,  Getzel,  the  entities  to  which  he  is  pioviding 
consulting  services,  Davidson,  and  Howard,  among  others.  While  some  of  these  emails  have 
already  been  obtained  via  subpoenas  and  search  waiTants,  I  loiow  from  my  training  and  experience 
that  individuals  can  and  do  delete  emails  from  their  Internet-based  inboxes  but  retain  copies  of 

ThWeifrailsmtheir  hard  drivesT^I  also  know  that  mdividuals  oftemhave  multiple  email-accounts, 

some  of  which  may  not  be  Icnown  to  law  enforcement,  and  as  a  result  electronic  devices  can  be  a 
unique  repositoiy  of  all  emails  relevant  to  certain  Subject  Offenses.  Indeed,  from  my  involvement 
in  this  investigation,  I  know  that  Cohen  had  an  email  account  with  the  Tmmp  Organization,  but 
the  USAO  and  FBI  have  not  been  able  to  obtain  the  contents  of  that  account  to  date.  Thus,  emails 
relevant  to  the  Subject  Offenses  are  likely  stored  on  electronic  devices  in  Subject  Premises-1, 


Subject  Premises-2  and/or  Subject  Premises-4. 

b.  Additionally,  Subject  Premises-1,  Subject  Premise-2  and  Subject  Premises-4  lilcely 
contain  electronic  copies  of  documents  relevant  to  the  Subject  Offenses.  Indeed,  I  know  from  my 
training  and  experience  tliat  individuals  often  retain  copies  of  important  documents  on  their 
computers  or  other  electronic  devices  capable  of  storing  information,  including  cellphones  (such 
as  the  Subject  Devices)  and  tablets.  Here,  there  are  a  number  of  documents  that  Cohen  has  likely 
retained  that  will  be  relevant  to  the  Subject  Offenses.  For  example,  elecfronic  devices  may  include 
documentation  of  Cohen’s  tme  net  worth,  a  listing  of  his  assets,  an  accounting  of  his  available 
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cash,  consulting  agreements  with  tliird  parties,  and  documentation  of  his  payment  to  Clifford, 

among  other  evidence  of  the  Subject  Offenses. 

c.  Third,  I  know  from  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email 

Warrants  that  Cohen  sent  up  online  banking  with  First  Republic.  Based  on  my  training  and 
experience,  I  know  that  individuals  who  set  up  online  banldng  often  receive  electronic  notices 
concerning  financial  transactions  and,  on  occasion,  save  records  of  theh  financial  transactions  to 
theft  devices.  Accordingly,  there  is  probable  cause  to  believe  that  Cohen’s  electronic  devices 
contain  evidence  of  banking  activity,  including  the  existence  of  bank  accounts  or  assets  that  Cohen 
“didlioTdisclose  to  Sterlings  MelfoseT 

d.  Fourth,  from  my  review  of  records  produced  by  Apple,  I  know  that  Cohen 
communicates  using  text  message  as  well  as  encrypted  communications  applications.  These 
apphcations  that  Cohen  has  downloaded  onto  a  phone  include,  but  are  not  limited  to,  WhatsApp, 
Signal,  and  Dust.  I  know  from  my  review  of  toll  records  and  text  messages  that,  in  particular, 
Cohen  communicated  with  Pecker  using  these  encrypted  applications.  Accordingly,  there  is 
probable  cause  to  believe  that  Cohen’s  cellphones  -  the  Subject  Devices  -  will  contain  encrypted 
messages  that  are  not  otherwise  accessible  relating  to  the  Subject  Offenses. 

54.  Based  on  my  training  and  experience,  I  know  that  individuals  who  engage  in 
financial  crimes  commonly  use  computers  to  communicate  with  co-conspirators,  keep  financial 
ledgers,  and  retain  fi-audulent  documents.  As  a  result,  they  often  store  data  on  theft-  computers 
related  to  theft-  illegal  activity,  which  can  include  logs  of  online  or  cellphone-based  chats  with 
co-conspirators;  email  correspondence;  contact  information  of  co-conspirators,  including 
telephone  numbers,  email  addresses,  and  identifiers  for  instant  messaging  and  social  medial 
accounts;  bank  account  numbers;  and/or  records  of  uses  of  funds. 
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55.  Based  on  my  training  and  experience,  I  also  know  that,  where  computers  are  used 
in  furtherance  of  criminal  activity,  evidence  of  the  criminal  activity  can  often  be  found  months  or 
even  years  after  it  occuiTed.  This  is  typically  true  because: 

o  Electronic  files  can  be  stored  on  a  hai-d  drive  for  years  at  little  or  no  cost  and  users  thus 
have  little  incentive  to  delete  data  that  may  be  useful  to  consult  in  the  fiiture. 

•  Even  when  a  user  does  choose  to  delete  data,  the  data  can  often  be  recoveied  months 
or  years  later  with  the  appropriate  forensic  tools.  When  a  file  is  deleted  on  a  home 
computer,  the  data  contained  in  the  file  does  not  actually  disappear,  but  instead  lemains 
on  the  hard  drive,  in  “slack  space,”  until  it  is  oveiwritten  by  new  data  that  cannot  be 
stored  elsewhere  on  the  computer.  Similarly,  files  that  have  been  viewed  on  the  Internet 
are  generally  downloaded  into  a  temporary  Internet  directory  or  “cache,”  which  is  only 
overwritten  as  the  “cache”  fills  up  and  is  replaced  with  more  recently  viewed  Internet 

pages.  Thus”,  the  ability  to  refideve'ftom'  a  hard  drive  or  other  electronic^orage  media 

depends  less  on  when  the  file  was  created  or  viewed  than  on  a  particular  user’s 
operating  system,  storage  capacity,  and  computer  habits. 

o  In  the  event  that  a  user  changes  computers,  the  user  will  typically  tr^sfer  files  firom 
the  old  computer  to  the  new  computer,  so  as  not  to  lose  data.  In  addition,  users  often 
keep  backups  of  their  data  on  electronic  storage  media  such  as  thumb  drives,  flash 
memory  cards,  CD-ROMs,  or  portable  hard  drives. 

56.  Based  on  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 
Cohen  engaged  in  the  Subject  Offenses,  and  that  evidence  of  this  criminal  activity  is  likely  to  be 
found  in  the  Subject  Premises,  on  computers  and  electronic  media  found  in  the  Subject  Premises, 
and  on  the  Subject  Devices.  In  particular,  there  is  probable  cause  to  believe  that  the  Subject 
Premises  and  Subject  Devices  will  contain  evidence,  fioiits,  and  instrumentalities  of  violations  of 
the  Subject  Offenses,  as  more  fully  described  in  Sectiop  II  of  Attachments  A,  B,  C,  D,  E  and  F  to 

the  proposed  warrants,  including  the  following: 

a.  Evidence  necessary  to  establish  the  occupancy  or  ownership  of  the  Subject 
Premises,  including  without  limitation,  utility  and  telephone  bills,  mail  envelopes,  addressed 
cori'espondence,  bank  statements,  identification  documents,  and  keys. 

b.  Evidence  relating  to  Sterling,  Melrose,  and/or  taxi  medallions. 
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c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  tcl 


land/or  entities  associated  with  him. 


d.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 


with  Sterling  and/or  Melrose. 

e.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
mdicate  the  natare  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  coimection  with  Essential  Consultants. 

f.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  natui'e  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

g.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  banlc  records. 

h.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and^^^^^^^^^^md  by  Cohen. 

i.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Kai-en  McDougal,  or  then- 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

j.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 
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k.  Evidence  of  communications  involving  Michael  Cohen,  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Tmmp  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

l.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Tramp  Campaign. 

m.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Tramp  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tramp’s  relationship  in  the  ran  up  to  the  election. 

— - nT'EvidMceTelating^to  any  reimbursemen1ror-other  promises- made-to-Cohen-for 

payment  to  Clifford  or  others  in  connection  with  the  election. 

o.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

p.  Communications  with  othei's,  including  JefiErey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances; 

q.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  soui'ce  of  fionds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

r.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

TTT.  Procedures  for  Searching  ESI 
A.  Execution  of  Warrant  for  ESI 

57.  Federal  Rule  of  Criminal  Procedure  4 1  (e)(2)(B)  provides  that  a  warrant  to  search 

for  and  seize  property  “may  authorize  the  seizure  of  electronic  storage  media  or  the  seizui'e  or 
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copying  of  electronically  stored  mfomation  ...  for  later  review.”  Consistent  with  Rule  41,  this 
application  requests  authorization  to  seize  any  computer  devices  and  storage  media  and  transport 
them  to  an  appropriate  law  enforcement  facility  for  review.  This  is  typically  necessary  foi  a  number 
of  reasons; 

o  First,  the  volume  of  data  on  computer  devices  and  storage  media  is  often  impractical 
for  law  enforcement  personnel  to  review  in  its  entirety  at  the  search  location. 

9  Second,  because  computer  data  is  particularly  vulnerable  to  inadyeifent  or  intentional 
modification  or  destruction,  computer  devices  ai'e  ideally  examined  in  a  conftolled 
environment,  such  as  a  law  enforcement  laboratory,  where  trained  personnel,  using 
specialized  software,  can  make  a  forensic  copy  of  the  storage  media  that  can  be 
subsequently  reviewed  in  a  manner  that  does  not  change  the  underlying  data. 

•  Thhd,  there  are  so  many  types  of  computer  hardware  and  software  in  use  today  that  it 
can  be  impossible  to  bring  to  the  search  site  all  of  the  necessary  technical  manuals  and 
specialized  personnel  and  equipment  potentially  required  to  safely  access  the 
underlying  computer  data. 

•  Fourth,  many  factors  can  complicate  and  prolong  recovery  of  data  fiorn  a  computer 
device,  including  the  increasingly  common  use  of  passwords,  encryption,  or  other 
features  or  configurations  designed  to  protect  or  conceal  data  on  the  computer,  which 
often  take  considerable  tune  and  resources  for  forensic  personnel  to  detect  and  resolve. 

58.  As  discussed  herein,  Squire  Patton  Boggs  is  a  ftinctioning  law  finn  that  conducts 
legitimate  business  umnlated  to  Cohen’s  commission  of  the  Subject  Offenses.  Subject  Premises- 
2  is  an  office  located  inside  of  Squire  Patton  Boggs’s  New  York  office.  In  order  to  execute  the 
warrant  in  the  most  reasonable  fashion,  law  enforcement  personnel  will  attempt  to  investigate  on 
the  scene  of  what  computers  or  storage  media,  if  any,  must  be  seized  or  copied,  and  what  computers 
or  storage  media  need  not  be  seized  or  copied.  Law  enforcement  personnel  will  speak  with  Squire 
Patton  Boggs  personnel  on  the  scene  as  may  be  appropriate  to  determine  which  files  and  electronic 
devices  within  Subject  Premises-2  belong  to  or  were  used  by  Cohen.  While,  based  on  the 
foregoing,  it  does  not  appear  that  Cohen  shared  electronic  devices  or  a  server  with  Squire  Patton 
Boggs,  where  appropriate,  law  enforcement  personnel  will  copy  data,  rather  than  physically  seize 
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computers,  to  reduce  the  extent  of  any  disruption  of  Squire  Patton  Boggs’s  operations.  If,  after 
inspecting  the  seized  computers  off-site,  it  is  determined  that  some  or  all  of  this  equipment  is  no 
longer  necessary  to  retrieve  and  preserve  the  evidence,  the  Government  will  return  it. 

59.  Additionally,  because  Cohen  is  an  attorney,  and  claims  to  serve  as  a  personal 
attorney  for  Trump,  the  review  of  evidence  seized  fi'om  the  Subject  Premises  and  Subject  Devices 
will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law  enforcement 
personnel  involved  in  the  investigation,  including  attorneys  for  the  Government,  collect  evidence 
in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable  privilege.  When 

appropriate,  fheprocedureswiirincludeuse"ofaliesipated^‘filterteam7’separate'and  apart  fi'om- 

the  investigative  team,  in  order  to  review  potentially  privileged  communications  and  determine 
which  communications  to  release  to  the  investigation  and  prosecution  team. 

B.  Accessing  ESI  on  the  Subj  ect  Devices 

60.  As  described  above,  the  Subject  Devices  are  both  Apple  brand  devices. 

61.  I  know  from  my  training  and  experience,  as  well  as  from  information  found  in 
publicly  available  materials  including  those  published  by  Apple,  that  some  models  of  Apple 
devices  such  as  iPhones  and  iPads  offer  their  users  the  ability  to  unlock  the  device  via  the  use  of  a 
fingerprint  or  thumbprint  (collectively,  “fmgerprmt”)  in  lieu  of  a  numeric  or  alphanumeric 
passcode  or  password.  This  feature  is  called  Touch  ID.  I  also  loiow  that  the  Apple  iPhone  X  offers 
its  users  the  ability  to  unlock  the  device  via  the  use  of  facial  recognition  (through  infrared  and 
visible-  light  scans)  in  lieu  of  a  numeric  or  alphanumeric  passcode  or  password.  This  feature  is 
called  Face  ID. 

62.  If  a  user  enables  Touch  ID  on  a  given  Apple  device,  he  or  she  can  register  up  to  5 
fingerprints  that  can  be  used  to  unlock  that  device.  The  user  can  then  use  any  of  the  registered 
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fingerprints  to  unlock  the  device  by  pressing  the  relevant  finger(s)  to  die  device’s  Touch  ID  sensor, 
which  is  found  in  the  round  button  (often  referred  to  as  the  “home”  button)  found  at  the  bottom 
center  of  the  fi'ont  of  the  device.  If  a  user  enables  Face  ID  on  a  given  Apple  device,  he  or  she  can 
unlock  the  device  by  raising  the  iPhone  to  his  or  her  face,  or  tapping  the  screen.  In  my  tiaining 
and  experience,  users  of  Apple  devices  that  offer  Touch  ID  or  Face  ID  often  enable  it  because  it  is 
considered  to  be  a  more  convenient  way  to  unlock  the  device  than  by  entering  a  numeric  or 
alphanumeric  passcode  or  password,  as  well  as  a  more  secure  way  to  protect  the  device  s  contents. 

63.  In  some  circumstances,  Touch  ID  or  Face  ID  cannot  be  used  to  unlock  a  device  that 
has  either  security  feature  enable,  and  a  passcode^or^password^mustrbe  used  instead.  These 
circumstances  include;  (1)  when  the  device  has  just  been  turned  on  oi  lestarted,  (2)  when  moie 
than  48  hours  has  passed  since  the  last  time  the  device  was  unlocked;  (3)  when  the  passcode  or 
password  has  not  been  entered  in  the  last  6  days,  and  the  device  has  not  been  unlocked  via  Touch 
ID  in  the  last  8  hours  or  the  device  has  not  been  unlocked  via  Face  ID  in  the  last  4  hours;  (4)  the 
device  has  received  a  remote  lock  command;  or  (5)  five  unsuccessful  attempts  to  unlock  the  device 
via  Touch  ID  or  Face  ID  are  made. 

54.  The  passcodes  or  passwords  that  would  unlock  the  Subject  Devices  aie  not  known 
to  law  enforcement.  Thus,  it  will  likely  be  necessary  to  press  the  fingeis  of  the  user  of  the  Subject 
Devices  to  the  devices’  Touch  ID  sensor,  or  hold  the  Subject  Devices  in  front  of  the  user’s  face  to 
activate  the  Face  ID  sensor,  in  an  attempt  to  unlock  the  devices  for  the  purpose  of  executing  the 
seai'ch  authorized  by  this  wan'ant.  Attempting  to  unlock  the  relevant  Apple  devices  via  Touch  ID 
with  the  use  of  the  jangerprints  of  the  user,  or  via  Face  ID  by  holding  the  device  in  front  of  the 
user’s  face,  is  necessary  because  the  government  may  not  otheiwise  be  able  to  access  the  data 
contained  on  those  devices  for  the  puipose  of  executing  the  seai'ch  authorized  by  this  warrant. 
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65.  Based  on  these  facts  and  my  training  and  experience,  it  is  likely  that  Cohen  is  the 
user  of  the  Subject  Devices,  and  thus  that  his  fingei-prints  ai-e  among  those  that  are  able  to  unlock 
the  Subject  Devices  via  Touch  ID  or  his  face  is  able  to  unlock  tlie  Subject  Devices  via  Face  ID. 

66.  Although  I  do  not  know  which  of  a  given  user’s  10  fingerprints  is  capable  of 
unlocking  a  particular  device,  based  on  my  training  and  experience  I  know  that  it  is  common  foi  a 
user  to  unlock  a  Touch  ID-enabled  Apple  device  via  the  fingerprints  on  thumbs  or  index  fingers. 
In  the  event  that  law  enforcement  is  unable  to  unlock  the  Subject  Devices  as  described  above 
within  the  five  attempts  permitted  by  Touch  ID,  this  will  simply  result  in  the  device  requiring  the 
entry  of  a  password  or  passcode  b^Tofe  it  can  be  rmlocked. 

67.  I  also  know  fi-om  my  fiaining  and  experience,  and  my  review  of  publicly  available 
materials  pubUshed  by  Apple  that  Apple  brand  devices,  such  as  the  Subject  Devices,  have  a  feature 
that  allows  a  user  to  erase  the  contents  of  the  device  remotely.  By  logging  into  the  Internet,  the 
user  or  any  other  individual  who  possesses  the  user’s  account  information  can  take  steps  to 
completely  wipe  the  contents  of  the  device,  thereby  destroying  evidence  of  criminal  conduct,  along 
with  any  other  information  on  the  device.  The  only  means  to  prevent  this  action  is  to  disable  the 
device’s  ability  to  connect  to  the  Internet  immediately  upon  seizure,  which  requires  either  access 
to  the  device  itself  to  alter  the  settings,  or  the  use  of  specialized  equipment  that  is  not  consistently 

available  to  law  enforcement  agents  at  every  arrest. 

68.  Due  to  the  foregoing,  I  request  that  the  Court  authorize  law  enforcement  to  press 
the  fingers  (including  thumbs)  of  Cohen  to  the  Touch  ID  sensors  the  Subject  Devices,  or  hold  the 
Subject  Devices  in  fi-ont  of  Cohen’s  face,  for  the  purpose  of  attempting  to  unlock  the  Subject 
Devices  via  Touch  ID  or  Face  ID  in  order  to  search  the  contents  as  authorized  by  this  warrant. 
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C.  Review  of  ESI 

69.  Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation 
of  forensic  image  copies,  law  enforcement  personnel  (including,  in  addition  to  law  enforcement 
officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and 
related  proceedings,  attorneys  for  the  govermnent,  attorney  support  staff,  agency  personnel 
assisting  the  government  in  this  investigation,  and  outside  technical  experts  under  government 
control)  will  review  the  ESI  contained  therein  for  infonnation  responsive  to  the  warrant. 

70.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques 

~toliefeSiii5^wliiclrfiles  or  other  ESEcontain  evidence  br  fiTiits  oEthe  Subject  QffensesT—Sueh- 

techniques  may  include,  for  example: 

•  surveying  directories  or  folders  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  eontain  pertinent  files); 

•  eondueting  a  file-by-file  review  by  “opening”  or  reading  the  first  few  “pages”  of  sueh 
files  in  order  to  determine  their  precise  contents  (analogous  to  perfoiming  a  cursory 
examination  of  each  document  in  a  file  cabinet  to  determine  its  relevanee), 

•  “scanning”  storage  areas  to  discover  and  possibly  recover  recently  deleted  data  or 
deliberately  hidden  files;  and 

•  perfoiming  eleetronie  keyword  searches  through  all  electronic  storage  ai'eas  to 
determine  the  existence  and  location  of  data  potentially  related  to  the  subjeet  matter  of 
the  investigation^'*;  and 

•  reviewing  metadata,  system  information,  configuration  files,  legistry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


Keyword  searehes  alone  ai'e  typically  inadequate  to  deteet  all  relevant  data.  For  one  thing, 
keyword  searehes  work  only  for  text  data,  yet  many  types  of  files,  sueh  as  images  and  videos,  do 
not  store  data  as  searehable  text.  Moreover,  even  as  to  text  data,  there  may  be  information  property 
subject  to  seizure  but  that  is  not  captured  by  a  keyword  search  beeause  the  information  does  not 
eontain  the  keywords  being  searehed. 
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71.  Law  enforcement  personnel  will  make  reasonable  efforts  to  restrict  their  search  to 
data  falling  within  the  categories  of  evidence  specified  in  the  warrant.  Depending  on  the 
chcumstances,  however,  law  enforcement  personnel  may  need  to  conduct  a  complete  review  of  all 
the  ESI  from  seized  devices  or  storage  media  to  evaluate  its  contents  and  to  locate  all  data 
responsive  to  the  warrant. 

D.  Return  of  ESI 

72.  ,  If  the  Government  detennines  that  the  electronic  devices  are  no  longer  necessaiy 
to  retrieve  and  preserve  the  data,  and  the  devices  themselves  are  not  subject  to  seizui'e  pursuant  to 

■FederalRule^of  eriminaLProcedure  4I(c)7the  Government  will  retum-these  items^upon-requestr- 

Computer  data  that  is  encrypted  or  um'eadable  will  not  be  returned  unless  law  enforcement 
persormel  have  determined  that  the  data  is  not  (i)  an  instmmentality  of  the  offense,  (ii)  a  fruit  of 
the  criminal  activity,  (iii)  contraband,  (iv)  otherwise  unlawfully  possessed,  or  (v)  evidence  of  the 
Subject  Offenses. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant  


United  States  District  Court 

•  for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property*  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No , 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  ? 

New  York,  New  York  1 0065,  and  any  closed  ^ 

containers/items  contained  therein,  See  Attachment  D  ^ 

SEARCH  AND  SEIZURE  WARRANT 

To:  '  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  goyeiinnent  requests  the  search  . 

of  the  following  person  or  property  located  in  the  _ Southern  Distiict  of  _ New  York _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)', 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  any  closed  containers/items 
contained  therein,  See  Attachment  D 

The  person  or  property  to  be  seai'ched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 


See  Attachment  D 


I  fmd  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 


property, 


YOU  ARE  COMMANDED  to  execute  this  wairant  on  or  before 


(not  to  exceed  14  days) 

gf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  Warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

Upon  its  retmn,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

- - - - - -  USMJlmtials 


O  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  autlrorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 

searched  or  seized  (check  the  appropriate  box)  Dfor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of 


Date  and  time  issued: 


Jndge  *s  signature 


City  and  state:  New  York.  NY _  _ Hon.  Henrv  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev,  01/09)  Search  and  Seizure 

warrant  (^ir'agez; 

Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventoiy  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  peijury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Couit. 


Executing  officer  *s  signature 


Printed  name  and  title 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  91  of  201 


ATTACB3MDENT  B 

L  Premises  to  be  Searched— Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein; 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-d  is  located  on  the  17th  floor  of  the  hotel. 

n.  Items  to  Be  Seized 

A.  Evidence,  Emits,  and  Instrumentalities  of  the  Subject  Offenses 

_ _ Thedtems-to-be-seized-fium  Subject  Premisesr4„areewdmce^.lMts,_andinstrumenMties 

of  violations  of  18  U.S.C.  §§  371  (consphacy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  banlc  entries),'  1014  (false  statements  to  a  fmancial  institution),  1343  (wire  fraud),  and  1344 
(banlc  ffaud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

'  a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 

medallions,  ftom  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  trangfeimn^ntgesUn  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relatmg  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  cormection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D,  Cohen  &  Associates, 
or  evidence  of  the  piupose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates.  • 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  banlc  records,  from  January  1, 
20 1 3  to  the  present. 

pjRvidmicernlatinetoaereMnmts,  loans,  and/or  financial  ffarmction^etween 

Cohen 
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and  any  payments  by  Cohen,  h:om  January 

1, 2012  to  the  present 

h.  Evidence  relating  to  payments  to  Stephame  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agi'eements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

Ic.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  commimications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  Umits. 

o.  Conrmunications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p.  Commimications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  ari  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  pmpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  cornputer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  n.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  driv^,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devrces 
or  storage  media,  this  warTant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Pxemises-4  also  include: 

1 .  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media;  including  but  not  limited  to  any  physicd  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar’  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  formation 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  lo  cations  of  those  persons  wth  access  to, 

^onttoluverromownership  of  the  seized  or  copied-computei'  deviees-oi-stQi-age-media.^ 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  as.-jisfing  the  government  in  this  mvestigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example. 

•  sui-veying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looldng  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cm’soiily  reading  the  fh’st  few  “pages”  of  such  files  in  order  to  deteimine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whethei 
occurrences  of  language  contained  in  such  storage  ai'eas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewmg  metadata,  system  information,  configui’ation  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


15 

2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  94  of  201 


Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.A  and  n.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  fiom  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedui-es  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedm'es  shall  mclude 
use  of  a  designated  “filter  team,”  sepai'ate  and  apart  fiom  the  investigative  team,  in  order  to 
address  potential  privileges . 
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TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


oTJiLvestigatiQn,  _being 

deposes  and  says: 

1.  Introduction 
A.,  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBF’).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 
involving  electronic  evidence. 

2.  On  or  about  April  8,  2018,  the  Honorable  Henry  B.  Pitman,  United  States 
Magistrate  Judge,  issued  a  search  and  seizure  warrant  for  the  premises  known  and  described  as 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein.  The  warrant  and  my  supporting  affidavit  (the 
“Affidavit”)  are  appended  hereto.  The  Affidavit  is  incorporated  herein  by  reference  in  its  entirety 
as  Exhibit  A. 


UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  of  America  for  a  Search  and  Seizure 
Warrant  for  the  Premises  Known  and  Described 
as  Loews  Regency  Hotel,  540  Park  Avenue, 
Room  1628,  a  Suite  that  Encompasses  Rooms 
1628,  1629,  and  1630  New  York,  New  York 
10065,  and  Any  Closed  Containers/Items 
Contained  Therein 
Reference  No.  20 1 8R00 1 27 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 

SpeciaLAgent,-Ee( 
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3 .  On  or  about  April  9,2018,  based  upon  a  conversation  with  another  law  enforcement 
agent  who  spoke  to  an  employee  of  Loews  Regency  Hotel,  I  learned  that  Michael  Cohen  is  in  fact 
staying  in  Room  1628  (in  a  suite  encompassing  rooms  1628, 1629,  and  1630)  (collectively,  “Room 
1628”),  not  Room  1728.  Accordingly,  I  respectfully  submit  the  attached  amended  warrant 
pursuant  to  Rule  41  of  the  Federal  Rules  of  Criminal  Procedure  for  the  following  Subject  Premises; 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein  (“Subject  Premises-4”).  For  the  reasons  detailed  in 
the  Affidavit  and  herein,  I  believe  that  there  is  probable  cause  to  believe  that  Subject  Premises-4 
contains  evidence,  fruits,  and  instrumentalities  of  violations  of  18  U.S.C.  §§  1005  (false  bank 

entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (bank  fraud) 
(collectively,  the  “Bank  Fraud  Offenses”),  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371 
(conspiracy  as  it  pertains  to  the  other  Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

4.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachment  A  to  this  affidavit  and  to  the  Search  and  Seizure 
Warrant. 


3 

2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  97  of  201 


5.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  he  maintained  under  seal  until  the 
Court  orders  otherwise. 


Special  Agent 
FBI 


Sworn  to  before  me  on 
9th  day  of  April,  2018 


UU\ 


tr\KH 


HOl^.  HENRY  B.  ^ITMAN 

UNITED  STATES  MAGISTRATE  JUDGE 
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ATTACHMENT  A 

I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein; 

Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630)  (collectively,  “Room 
1628”),  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New  York 
10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject  Premises- 
4  is  located  on  the  1 6th  floor  of  the  hotel. 

XL  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The^iteths  to  be  seizedlfpm~^Su5jecLPl^ises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfei^n^nterest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  ^^^^^^^^|md/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  by 
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and  any  payments  by 


to  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

- —k,— Evidence  relating -to  Cohen’s  role  in  the  -Trump  Campaign^  and  coordinatiomor 

consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  inyolving  Trump’s  relationship  in  the  mn  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Coheir  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include:  ’ 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3.  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media.  ______ 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

»  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

®  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

®  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United  i 
States  of  America  for  a  Search  and  Seizme  : 
Warrant  for  the  Premises  Known  and  Described  ; 


New 


as  (1)  502  Park  Avenue,! 

York,  New  York  10022,  (2)  Michael  Cohen’s  : 
Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New  i 
York,  New  York  10112,  (3)  Safe  Deposit  Box  #  ; 
^■Located  at  the  TD  Banlc  Branch  at  500  Park  : 
Avenue,  New  York,  New  York  10019,  and  (4)  ; 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  ; 
1728,  New  York,  New  York  10065,  and  Any  ; 
Closed-Containers/[tems_Contained  Therein, mdu 


the  Electronic  Devices  Known  and  Descril^^^^ 
^^M^nple  iPhone  with  Phone  Numbei^^H 
^i^^^and  (2)  an  Apple  iPhone  with  Phone 

Number^^^^^^^m 

Reference  No.  20 1 8R00 1 27 


TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 

Special  Agent,  Federal  Bureau  of  Investigation,  being  duly  sworn, 

deposes  and  says: 


1.  Introduction 


A,  Affiant 

1.  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 

a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  m  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  fi'auds  on  financial  institutions,  as  well  as  into  offenses  mvolvmg 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 


involving  electronic  evidence. 

2.  I  make  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  4 1  of  the  Federal 


Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  premises  specified  below  (the  Subject 
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Premises”)  and  the  electronic  devices  specified  below  (the  “Subject  Devices”)  for,  and  to  seize, 
the  items  and  information  described  in  Attachments  A,  B,  C,  D,  E  and  F.  This  affidavit  is  based 
upon  my  personal  Icnowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enforcement  personnel;  and  my  training,  experience  and  advice  received  conceramg  the 
use  of  electronic  devices  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored 
infoimation  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of 
establishing  probable  cause,  it  does  not  include  all  the  facts  that  I  have  learned  during  the  comse 

of„my_investigation.-Where,Ahe_  contents^,,  documents  to  actions,  statements,  and 

conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in  part,  except  where 
otherwise  indicated. 

B.  The  Subject  Premises  and  Subject  Devices 

3.  Subject  Premises-1,  Subject  Premises-2,  Subject  Premises-3  and  Subject  Premises- 

4  (collectively,  to  “Subject  Premises”)  are  particularly  described  as: 

a.  Subject  Premises-1  is  Apartment  ^Jlocated  inside  to  building  at  502 
Pai'k  Avenue,  New  York,  New  York  10022.  The  building  located  at  502  Parle  Avenue  is  a  32- 
floor  brick  residential  building.  Subject  Premises-1  is  located  on  the^jQoor  of  to  buildmg. 
Based  on  my  review  of  New  York  City  property  records,  I  have  learned  that  Michael  Cohen  and 
Laura  Cohen  own  Subject  Premises-1. ^  Additionally,  as  described  below,  Subject  Premises- 1  is 

Cohen’s  full-time  residence. 

b.  Subject  Premises-2  is  an  office  located  on  the  23rd  floor  of  the  building  at 
30  Rockefeller  Plaza,  New  York,  New  York  10112.  The  building  located  at  30  Rockefeller  Plaza 

tot  on  or.  about  October  28,  2015,  Cohen  tansferred  Subject 

Premises-1  into  a  trust. 
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is  a  66-floor  office  building  that  .spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller 
Plaza.  Subject  Premises-2  is  located  on  the  23rd  floor  of  the  building  inside  of  the  offices  of  the 
law  firm  Squke  Patton  Boggs.  The  office  is  assigned  to  Michael  Cohen.  As  described  below, 

Michael  Cohen  works  and  conducts  meetings  at  Subject  PremiseS‘-2. 

c.  Subject  Premises-3  is  a  safety  deposit  box  located  inside  the  TD  Bank 
branch  location  at  500  Park  Avenue,  New  York,  New  York  10019.  Based  onmy  review  of  records 
maintained  by  TD  Banlc,  I  have  learned  that  the  safety  deposit  box  is  approximately  five  inches  by 

ten-inches.in-xize,andis.marked_asj3mJ,B_TbeAafety_dgpositboxis__m^^ 

Cohen  and  Laura  Cohen. 

d.  Subject  Premises-4  is  Room  1728  located  inside  the  Loews  Regency  Hotel 
at  540  Park  Avenue,  New  York,  New  York  10065.  The  building  is  a  luxury  hotel  located  on  Park 
Avenue  and  61st  Street.  Subject  Premises-4  is  located  on  the  17th  floor  of  the  hotel.  Based  onmy 
review  of  emails  obtained  pursuant  to  search  waiTants  described  below,  I  have  learned  that  on  or 
about  January  5,  2018,  Cohen  received  an  email  from  an  employee  of  Loews  Regency,  which 
included  a  price  quote  for  a  long-term  stay  suite  based  on  a  three-month  stay  from  January  8  to 
April  8, 2018.2  Qn  or  about  January  29, 2018,  Cohen  sent  an  email  to  a  Loews  Regency  employee, 
stating,  in  pertinent  part:  ‘T  just  spoke  to  my  wife  and  she  has  scheduled  the  move  for  Thursday. 
Please  mark  down  that  we  will  be  taking  possession  on  Thmsday,  February  1st.”  Based  on  my 
review  of  cell  phone  location  data,  I  have  leaiued  that,  over  the  past  24  hours,  two  cellular  phones 
used  by  Cohen  have  been  located  in  the  vicinity  of  Subject  Premises-4.  In  particular,  on  or  about 


2  Although  the  quoted  price  contemplated  a  three-month  stay  from  January  8  to  April  8,  it  appears 
that  Cohen  did  not  move  in  until  February  1,  and  as  of  today,  April  8,  cellphone  location 
information  demonstrates  that  Cohen’s  cellular  phones  are  in  still  in  the  vicmity  of  Subject 
Premises-4. 
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April  8,  2018,  law  enforcement  agents  using  a  “triggerfish”  device  identified  Room  1728  as  the 

room  within  the  hotel  in  which  the  Subject  Devices  ai-e  most  lilcely  present.^ 

e.  Therefore,  I  believe  that  Cohen  is  temporaiily  residing  in  Subject 

Premises-4. 

4.  .  Subject  Device-1  and  Subject  Device-2  (collectively,  the  “Subject  Devices”)  are 

particularly  described  as: 

a.  Subject  Device-1  is  an  Apple  iPhone  seiwiced  by  AT&T  with  the  telephone  number 

BarH  ^^y  nf  records  maintained  by  AT&T,  I  have  learned  that  Sjrbj^ 

Device-1  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-1  is  presently  located  in  the  Southern 

Disrtict  of  New  York. 

b.  Subject  Device-2  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 
^^^^Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 

Device-2  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  infonnation 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-2  is  presently  located  in  the  Southern 

District  of  New  York. 

c.  Based  on  my  training,  experience,  and  research,  and  Rom  consultmg  the 
manufacturer’s  and  service  providers’  advertisements  and  product  technical  specifications 
available  online,  I  Icnow  that  the  Subject  Devices  have  capabilities  that  allowthem  to,  among  other 
things:  malce  and  receive  telephone  calls;  save  and  store  contact  information;  send  and  receive 


^ased  on  my  conversations  with  these  agents,  I  understand  that  it  is  also  possible  that  the  Subject 

DSs  roLfloorbelow,mRoom  1628.  Howevei,  asnoted,IunderrtandthatCo^^^^^^^^^ 

a  orice  quote  for  a  long-term  stay  suite  and  is  residing  there  with  his  family.  Based  on  my 
LnversSs  wV  FBI  agents  conducting  sui-veillance,  I  understand  that  Room  1728  appears  to 
be  a  suite,  whereas  Room  1628  appears  to  be  a  standard  room. 
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emails  and  text  messages;  download  and  tun  mobile  telephone  applications,  inctading  enoiypted 
call  and  messaging  application  such  as  WhatsApp,  Signal,  and  Dust;  take,  send,  and  receive 
pictures  and  videos;  save  and  store  notes  and  passwords;  and  store  documents. 

C.  The  Subject  Offenses 

5.  For  the  reasons  detailed  below,  I  believe  that  there  is  probable  cause  to  believe  that 

the  Subject  Premises  and  Subject  Devices  contain  evidence,  fruits,  and  insti-umentaUties  of 
violations  of  18  U.S.C.  §§  1005  (false  bank  entries),  1014  (false  statements  to  a  financial 

Jnstitution),D343_(wireaffld),,a^^ 

52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the 
“Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other- 
Subject  Offenses)  (collectively,  the  “Subject  Offenses  ). 

D.  Prior  Applications 

6.  The  FBI  and  the  United  States  Attorney’ s  Office  for  the  Southern  Distoict  of  New 
York  (“USAO”)  have  been  investigating  several  courses  of  criminal  conduct  by  Michael  Cohen. 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Tmmp,  and  who  previously  served  for  over  a  decade  as  an  executive  in  die  Trump  Organization, 

an  international  conglomerate  with  real  estate  and  other  holdings. 

7.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beiyl  A.  Howell,  Chief 
United  States  Distilct  Judge  for  the  District  of  Columbia,  thine  seainh  warrants  for  emaUs  and 
other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
wai-rant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  SpecificaUy: 
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a. 


emails  in  the  accoxinti 


On  or  about  July  18, 2017,  the  FBI  sought  and  obtained  a  search  wairant  for 
bgmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received 


between  Januaiy  1, 2016  and  July  18, 2017  (the  “Fust  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  seai'ch  warrant 

for  content  stored  in  the  iCloud  account  associated  with  Apple  ID  ^^^H^gmail.com  (the 

“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  WaiTant”). 

c.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 


warrant  foi^emailsGmthe__CohenJ3mmL.AccpunlsenLgi:igc_e^^^  h  201 5  and 

November  13, 2017  (the  “Second  Cohen  Gmail  Warrant”). 

d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 

warrant  for  emails  in  the  accoum^^^^Hthe  “Cohen  MDCPC  Account”)- sent  or 
received  between  the  opening  of  the  Cohen  MDCPC  Account^  andNovember  13, 2017  (the  “Fii'st 
Cohen  MDCPC  Warrant”). 

8.  The  SCO  has  since  referred  certain  aspeets  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBFs  New  York  Field  Office.  As  part  of  that  refeiTal,  on  or 
about  Februai-y  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  Fii'st  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  WaiTant.  On  or  about  March  7,  20 1 8,  the  SCO  provided  the  USAO 


4  Based  on  my  review  of  this  waiTant  and  the  affidavit  in  support  of  it,  I  loiow  that  the  warrant  ^d 
not  pecity  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  s™e 

pro4tehIdprovidednon-contentinformationfortheCohenMDCPCA^^^^^^ 

the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
wan-ant. 
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with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  Warrant.^  A  filter  team 
worldng  with  the  SCO  had  previously  reviewed  the  content  produced  pursuant  to  these  warrants 

for  privilege. 

9.  On  or  about  Febmary  28, 20 1 8,  the  USAO  sought  and  obtained  seai'ch  warrants  for 
emails  in  the  Cohen  Gmail  Account  and  the  Cohen  MDCPC  Account,  among  other  accounts,  sent 
or  received  between  November  14,2017  andFebi'uai728, 2018  (the  “Thkd  Cohen  Gmail  Warrant 
and  the  “Second  Cohen  MDCPC  Warrant”).  The  content  produced  pursuant  to  these  wairants  is 

subjeGt4o-amongoingreviewJfor_priviIege,,by_mSDNY.filtgrtg^^ . . . 

10.  The  emails  search  wai'rants  described  above  are  referred  to  collectively  as  the 
“Cohen  Email  Warrants.” 

11.  On  or  about  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  a  warrant  for 
prospective  and  historical  cellphone  location  information  for  Subject  Device-1  and  Subject 
Device-2.  On  or  about  April  8, 20 1 8,  the  USAO  and  FBI  sought  and  obtained  authority  to  employ 
an  elech-onic  technique,  commonly  Icnown  as  a  “figgerfish,”  to  deteimine  the  location  of  Subject. 
Device-1  and  Subject  Device-2. 

n.  Probable  Cause 
A.  Overview 

12.  The  United  States  Attorney’s  Office  forthe  Southern  District  ofNew  York  and  FBI 
are  investigating,  among  other  things,  schemes  by  Tai'get  Subject  Michael  Cohen  (a)  to  defraud 
multiple  banlcs  fr-om  in  or  about  2016  up  to  and  including  the  present,  and  (b)  to  make  an  illegal 


5  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  February 
2,2018. 

^  On  or  about  February  28, 2018  and  April  7, 201 8,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  seai’ch  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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campaign  contiibution  in  October  2016  to  tlien-presidential  candidate  Donald  Trump.  As  noted, 
Cohen  is  an  attorney  who  cun-ently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 

an  international  conglomerate  with  real  estate  and  othei  holdings . 

13.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations 

in  and  omitted  material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banlcs  in  connection  with  a  tmnsaction  intended  to  relieve  Cohen  of 
-approximately-$22-miUiomin,dcblhe..QW.d_onJMLme^^^^  loans  from  the  banks.  As  set  forth 
in  detail  below,  in  these  fmancial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banlcs,  Cohen  appeai-s  to  have  (i)  intentionally  misrepresented  his  ability  to  pay  cash  by  failmgto 
disclose  cashhe  began  receiving  in  2017  firom  new  consulting  work;  (ii)  significantly  understated 
his  total  holdings  of  cash  and  cash  equivalents;  (iii)  failed  to  disclose  tens  of  thousands  of  dollars 
he  received  in  monthly  interest  income,  and  (iv)  failed  to  inform  the  banlcs  from  which  he  was 
seelcing  debt  relief  that  he  had  agreed  to  make  a  $3.8  million  cash  payment  to  a  thii'd  paity,B|| 
in  connection  wit:^^^^|  acquisition  of  the  taxi  medallions  securing  Cohen’s 
debt.  By  malcing  these  misrepresentations  and  material  omissions,  Cohen  avoided  malcing 
monUily  payments  on  his  loans,  and  attempted  to  fraudulently  induce  the  banlcs  to  reUeve  him  of 
certain  repayment  obligations  and  personal  guarantees  that  Cohen  and  his  wife  had  signed. 

14.  Additionally,  the  investigation  has  revealed  that  shortly  before  the  2016 
presidential  election,  Cohen  made  a  payment  of  $130,000  from  a  limited  liability  corporation 
'  (“LLC”)  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an  exframai-ital  affair  with 
then-candidate  Trump.  This  payment  was  made  to  Clifford  in  exchange  for  an  agi-eement  not  to 
make  any  public  disclosmes  about  her  alleged  affair  with  Trump.  As  set  forth  below,  there  is 
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probable  cause  to  believe  tliat  Cohen  made  this  payment  to  Clifford  for  tlae  purpose  of  mfluencmg 
the  presidential  election,  and  therefore  that  the  payment  was  an  excessive  in-ldnd  contribution  to 

the  Trump  campaign. 

15.  Based  on  my  review  of  emails  obtained  from  the  Cohen  Email  Waiiants, 
information  obtained  pursuant  to  the  iCloud  Warrant,  and  documents  produced  pursuant  to 
subpoenas,  as  well  as  my  review  of  public  sources,  I  have  learned  that  Cohen  has  used  the  Subject 
Premises  to  (a)  receive  documents  related  to  the  transaction  intended  to  relieve  Cohen  of  his  taxi 
medallion  debt  (b)  rp.r.p,ive  documents  and/or  conduct  meetings  related  to  his  consulting  work,  (c) 
receive  documents  and/or  conduct  meetings  relating  to  his  finances  and  assets,  some  of  which,  as 
noted  above  and  as  detailed  fiirther  herein,  he  has  concealed  from  the  banlcs  in  connection  with  the 
refinancing  of  his  taxi  medallion  debt,  (d)  receive  and  send  documents  relatmg  to  his  payment  to 
Clifford,  and  (e)  house  and  operate  electronic  devices  that  were  utilized  in  connection  with,  among 
other  things,  the  taxi  medallion  ti-ansaction,  Cohen’s  consulting  work,  and  his  payment  to  Clifford. 
Specifically,  as  described  below.  Subject  Premises-1  lilcely  contains  evidence  concerning  Cohen’s 
taxi  medallion  loans,  his  negotiations  with  banlcs,  his  personal  finances,  his  consulting  work,  his 
tax  returns,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence, 
all  of  which  constitute  or  contain  evidence  of  the  Subject  Offenses.  Additionally,  as  described 
below.  Subject  Premises-2  likely  contains  evidence  relating  to  Cohen’s  consulting  work,  his, 
finances,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence. 
Subject  Premises-3,  as  described  below,  likely  contains  evidence  relating  to  Cohen’s  assets  and 
finances,  including  assets  that  may  not  have  been  disclosed  to  banks  in  connection  with  the 
refinancing  of  Cohen’s  taxi  medallion  debt  or  documents  relating  to  such  assets,  and  documents 
or  evidence  related  to  Cohen’s  payment  to  Clifford.  Subject  Premises-4  likely  contains  elecfr-onic 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which  themselves  contain  evidence  of 
the  Subject  Offenses,  including  concerning  Cohen’s  taxi  medallion  loans,  his  negotiations  with 
banlcs,  his  personal  finances,  his  consulting  work,  his  tax  returns,  and  his  payment  to  Clifford. 
Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that  the 
Subject  Premises  and  Subject  Devices  will  include  evidence  of  the  Subject  Offenses. 

B.  Probable  Cause  Regarding  Subjects’  Commission  of  the  Subject  Offenses’ 

The  Bank  Fraud  Scheme 

_ (i)  Cohen ’s  Statements  to  Sterling  National  Bank _ _ 

16.  As  set  forth  in  detail  below,  in  2014,  Cohen,  through  LLCs  controlled  by  him  and 

his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  fi'om  Sterling  National  Banlc  (“Sterlmg”)  and 
the  Mekose  Credit  Union  (“Mekose”),  secui'ed  by  taxi  medallions,  for  approximately  $20  million. 
Though  entered  into  by  LLCs,  the  loans  were  also  secured  by  personal  guarantees  in  the  names  of 
both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industiy  weakened  and  the  medallions  lost  value, 
Cohen  sought  to  renegotiate  the  terms  of  those  loans  and/or  relieve  himself  feom  their  obligations, 
including  the  personal  guarantees.  As  part  of  that  effort,  Cohen  made  a  series  of  representations 
to  Sterling  and  Melrose  about  his  net  worth,  assets,  available  cash  and  income,  among  other  things. 
Specifically,  based  on  my  review  of  records  maintained  by  Sterling  and  Mekose,  and  pubhc 
som-ces  concerning  the  taxi  industry  and  the  value  of  taxi  medallions,  as  well  as  my  participation 
in  interviews  with  a  Sterling  executive  vice-president  (the  “Sterling  Employee-1”)  and  two  other 


n^^ollowing  recitati^f  probable  cause,  I  frequently  refer  to  phone  calls  or  text  messages 
invoN^g  Cohen  The  text  messages  described  herein  as  -nt  or  received  by  Cohen  wero^ 
or  received  fi-om  the  telephone  numbers  associated  with  Subject  Device-1  or  Subject  Device-2^ 
The  vast  majority  of  the  phone  calls  described  herein  made  or  received  by  Cohen  were  made  or 

received  bythe  telephonenumbers  associated  with  SubjectDevice-1  or  Subject  Device-2,  although 

in  certain  limited  instances  Cohen  used  a  landline  or  other  phone. 
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Sterling  employees  (“Sterling  Employee-2”  and  “Sterling  Employee-3”),  I  have  leaimed,  among, 
other  things,  the  following: 

a.  Taxi  medallions  ai'e  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 

is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  Cily .  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  EEC  owns  two 
medallions).*  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed-  by 
loans  fi-om  Capital  One  banlc,  for  which  the  medallions  served  as  collateral.  Cohen  was  not  a  taxi 

-operatoiv-and  leased-hisuuedallions4o_a  third_p^a^^  That_third  party  made  monthly  payment  t^ 

Cohen,  who  in  turn  used  some  of  those  proceeds  to  make  his  monthly  loan  payments  to  Capital 
One. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  propeity  that  he  owned.  In  or  around  April  20 14,  Cohen  raised  with  Sterling 
the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One.  By  in  or  about 
September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would  allow 
Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  m  value 
of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval  in  the 
taxi  industry— as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber— taxi  medallron 
loans  were  viewed  by  banlcs  and  investors  as  safe,  short  term  credits,  as  the  market  value  of  taxr 
medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans— lUce  the  loans  held  by 
Cohen— were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee-1 ,  borrowers  typically  cashed  out  the  increase  rn  the  loan  amount 

^ne  of  these  companies^  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  m 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which 
according  to  letters  from  Capital  One  in  Sterling’s  files— was  greater  than  his  previous  debt  at 
Capital  One  Bank  ($21  million,  of  which  $  1 4.6  million  was  a  line  of  credit  to  Colien).  This  allowed 

Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 

aboutDecember  8, 2014,  each  of  Cohen’s  sixteen  taxi  medallion  LLCs  entered  into  loan  agreements 
and-promissoiymotesJwith-Steriing.fQrJhe_p3incipd_  s^  with  repayment  due  on 

December  8, 2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who  was  the 
sole  shareholder  of  the  LLC.  The  address  listed  for  each  of  the  LLCs  was  the  address  for  Subject 
Premises-1 .  The  loans  were  also  each  secured  by  a  security  agreement,  dated  the  same  day,  making 
the  medallions  collateral  for  the  notes.  To  give  Sterling  additional  security,  Michael  and  Laura 
Cohen  signed  personal  guarantees  and  confessions  of  judgment,  giving  Sterlmg  the  right  to  pursue 
collection  against  the  Cohens’  personal  assets  were  their  corporations  to  default  under  the  loan 
agreements.  The  personal  guai-anty  agreements  stated  that  the  LLCs  had  offices  at  the  address  for 
Subject  Premises-1,  and  contained  a  notice  provision  that  stated  that  any  notices  required  by  the 
agreements  should  he  mailed  to  Subject  Premises-1.  In  total,  Sterling  agreed  to  lend  approximately 
$22  million  to  the  Cohens’  companies. 

d.  Pursuant  to  participation  agreements,  Sterling  transferred  45  percent  of  Cohen  s 
taxi  medallion  debt  to  Melrose.^ 


9  Mehose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  m 
conservatorship  hy  the  National  CredifUnion  Administration  (“NCUA”). 
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e.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions,  Sterlmg  (and 
Meh’ose,  consistent  with  its  paiticipation  in  the  deal)  conducted  due  diligence.  At  Sterlmg  s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  m  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.*«  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  Icnow  that  Sterling  viewed  the 
ti-ansaction  favorably  because,  accounting  for  loan  payments,  cash  flows  from  the  medallions  were 

projected  to  be  positive,-thewalue_of  the  cMateMXas  estim^^  Sterling)  exceeded  $42  million^ 

and  the  net  worth  of  Cohen-who  was  the  dhect  obligor  under  the  guai-antee  agi'eements— was 
over  $77  milhon.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
20 1 4,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

f.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  soui'ces,  I  have 
leai-nedthat  overtime,  the  collateral  bacldng  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies.  Additionally,  Cohen  began  falling  behind  on  loan  payments 


to  Sterling  and  Melrose.  I  Icnow  firom  records  maintained  by  Sterling  and  an  inteiwiew  with  Sterlmg 
Employee-2  that,  beginning  in  or  around  September  2015,  Cohen  told  Sterlmg,  m  sum  and 
substance,  that  the  individual  leasing  Cohen’s  medallions  had  fallen  behind  in  malcing  payments  to 
Cohen,  and  that  as  a  result,  the  monthly  cash  flow  fi-om  his  taxi  medallions  had  been  reduced, 
leaving  him  with  a  shortfall  of  approximately  $16,000  each  month.  For  instance,  I  have  reviewed 
an  email  from  Sterling  Employee-2,  dated  September  9,  2015,  summarizing  a  call  with  Cohen— 
which  according  to  the  email  and  toll  records  for  Cohen’s  cellphone  occurred  on  September  8, 


"“lo  Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  "^ion,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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2015— during  which  Cohen  told  Sterling  Employee-2,  in  sum  and  substance,  about  his  cash  flow 
problems  and  a  monthly  shortfall  of  approximately  $16,000.  In  that  same  email,  Sterlmg 
Employee-2  commented  that  despite  Cohen’s  statements,  his  personal  financial  information 
«indicate[d]  a  strong  ability  to  malce  up  the  difference  in  payments.”  Cohen,  however,  accordmg 
to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction  in  Cohen’s  monthly  payments. 

g.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
mterview  with  Sterling  Employee-2,  I  have  leai-ned  that  Cohen  and  Sterling  Employee-2  spoke 

. again  omSeptemben28, 2015,  anddmtdmngjmc^^^^ 

individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
loiow  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility-both  internally  and  with  Cohen-uf  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banlcs.“  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my 
review  of  loan  documents  and  records  maintained  by  Sterling,  I  Icnow  that  in  or  about  November 
2015,  as  a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his 
medallions  to  cover  monthly  interest  payments.  Sterling  and  Mekose  agreed  to  amend  their  loans 
witii  Cohen  by,  among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extendmg 

the  loan  maturity  date  to  December  8^  2017, 

h.  I  Icnow  fr-om  intemews  with  Sterlmg  Employee-1  and  Sterling  Employee-2,  as  well 

as  emails  !  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee-1  that 

Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  HHIH 


H  Based  on  my  review  of  property  records,  I  Icnow  that  on  or  about  October  28, 2015  ai'ound 
the  time  period  when  Sterling  raised  the  possibility  of  Cohen  posting  his  personal  residence- 
SubjectPremises-1— as  collateral,  Cohen  transferred  Subject  Premises-1  into  ati'ust. 
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assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  recoi-ds  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee-1  and  Sterling  Employee-2  referenced 
above,  I  know  that  by  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 

for  the  balance  of  the  loans,  which  at  the  time  was  $21 ,376,000.  I  Icnow  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  inteiview  with  Sterling  Employee-2,  that  as  a 
condition  of  the  transfer  of  the  medallion  loans— and  because  Sterling  was  unfamiliar  with 


Lstftrting  reque.sted  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3 1 , 20 1 7,  Cohen  told  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  fomard  with  the  medallion 


transfer  deal  with 


Indeed,  in  an  email  sent  by  Cohen  to  Sterling  Employee-2  on  or 
about  February  22,  2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million  from  the  loan 
amount” 


i.  Pursuant  to  the  participation  agreements  between  Sterling  and  Mehose,  Sterling 
was  required  to  secure  Mekose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  to||H||m  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 
Melrose  summai-izing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
Melrose  agree  to  the  terms.  On  or  about  May  2,  2017,  Sterling  Employee- 1  told 

that  Mekose  had  agreed  to  the  deal  in  principle,  and  that  Sterling  would  be  sending  the  parties  a 

term  sheet  shortly. 

j.  In  order  for  the  banks  to  conduct  diligence  and  evaluate  the  proposed  transaction 


fully,  they  requested  financial  information  from  the  parties.  On  or  about  June  7,  2017,  Sterling 
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Employee-1  emailed  Cohen  to  request  an  “updated  personal  financial  statement,  completed 
jointly  with  Cohen’s  wife,  and  Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June 
8, 2017,  Cohen  emailed  Sterling  Employee- 1  a  Sterling  personal  financial  statement  form  that  had 
been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1,  2017 
(the  “May  2017  Financial  Statement”)  that  was  also  attached.  The  May  2017  Financial  Statement 
included  a  cover  letter  hum  Cohen’s  accountant,  Jeffrey  Geteel,  stating,  in  sum  and  substance,  that 
the  infomation  in  the  statement  came  from  Cohen  and  that  Geteel  had  not  confirmed  its  accmacy 
0i^e0mpleteness.---Ihe-May  2QL7JEmancM  that  Cohgi  had  total  assets_o^ 

$41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The  May  2017 
Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash, 
$26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  leal  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence.^^ 

k.  Based  on  my  review  of  repoils  of  law  enforcement  interviews  of  SteiUng 
Employee-1, 1  have  learned  that  Sterling  Employee-1  reviewed  the  May  2017  Financial  Statement 
with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee-1  asked  Cohen  about 
specific  line  items  on  the  financial  statement,  including  tire  cash  amount,  value  of  medallions,  and 
total  liabilities.  Cohen  stated  to  Sterling  Employee-1,  in  sum  and  substance,  that  the  May  2017 
Financial  Statement  was  accurate. 

l.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen  an(^^| 
^^^■attaching  a  non-binding  term  sheet  memorializing  the  potential  transaction  between 


Based  on  my  review  of  Cohen’s  financial  statements,  I  loiow  that  the  precipitom  declnxe  in 
assets  fi-om  his  2014  financial  statement  to  his  2017  financial  statements  can  be  explained 
^taarily  by  reported  depreeiation  in  the  value  of  Cohen's  real  estate  assets  and  medallion 

investments. 
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Sterling,  Mekose,  Cohen,  andj 


The  term  sheet  included  a  cover  letter  addressed 


to  Cohen  at  Subject  Premises-1.  The  parties  negotiated  the  provisions  of  the  term  sheet  and,  on  or 
about  September  5,  2017,  Sterling  Employee-1  sent^^^^^^|^<J  Cohen  a  copy  of  the 
executed  term  sheet.  According  to  the  term  sheet^^^Hwould  borrow  $20,000,000 
fi'om  Sterling  and  Mekose,  to  be  seemed  by  the  medallions  that  | 


Ivas  to  acquke  from 


Cohen. 

m.  As  pai-t  of  the  agreement,  according  to  the  term  sheet,  $1,265,913  inpiincipal  (which 

la-whartwould-remainmftei^the420,000,Q00_payrnenUm:^outsten^^^ 

repaid  by  Cohen  and  the  two  banlcs,  with  Cohen  paying  fifty  percent  and  the  banks  dividmg  the 
remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 

dated  October4, 2017, the  parties  reachedapreliminaiy  agreement  that  Cohen  wouldpay  $632, 956 

of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789,  respectively,  in  the  fom  of  chai'ge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance— despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollai's-because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee-1,  in  sum  and  substance,  that  he  had 

insufficient  liquidity  to  pay  thefull  outstanding  principal  balance.  As  partoftheagi-eement,Sterlmg 

and  Mekose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guai-antees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  ^^^^Hi-'ansaction,  Cohen  would  no  longei 

have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

n.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 

because  the  kansaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Mekose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
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requked  and  requested  additional  financial  statements  and  tax  returns  for  Cohen  an(|gg||g| 
for  its  credit  under-writing  process.  In  response  to  Sterling’s  requests,  on  or  about  September  25, 
2017,  Cohen  emailed  Sterling  Employee-2  a  copy  of  his  2016  tax  return.  The  tax  retui-n  listed 
Cohen’s  inaUing  address  as  Subject  Premises-1 .  Additionally,  on  or  about  October  5, 2017,  Cohen 
re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October 
6, 2017,  Cohen  emailed  Sterling  Employee-2  a  statement  of  financial  condition,  dated  September 
30, 2017  (the  ‘‘September  2017  Financial  Statement  ), 

-0.  the  May-7.0 17,FinanciaLStatement,:the  September  ^17  Financial  Statement 

included  a  cover  letter  from  Jeffrey  Getzel,  Cohen’ s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confn-med  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.1^  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  m, 
closely  held  companies  (including  the  taxi  medallion  entities  and  his  real  estate  holdings), 
$3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence  (which,  for  the  first 


13  Based  on  my  review  of  Cohen’s  financial  statements,  I  Icnow  that  this  further  dechne  m 
assetslnbe  explaLd  primarily  by  reported  depreciation  in  the  value  of  Cohen  s  real  estate  assets 

and  medallion  investments. 

“  Notably,  the  September  2017  Financial  Statement  yalued  each  of  Cohen’s  thilty-too  New 
York  taxi  medallions  at  approximately  $180,187.50,  whij|^yomider.blyJess  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-^^^^^^^" 
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* 


time,  he  indicated  was  held  by  a  trast) The  September  20 1 7  Financial  Statement  included  assets 
and  liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medalhons 

and  some  of  his  real  estate  investment  entities . 

p.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 

records  maintained  by  Sterling,  I  have  also  learned  that  around  the  time  Cohen  provided  Sterlmg 
with  these  financial  statements— i.e.,  in  or  around  September  2017— Cohen  stopped  paying 
monthly  loan  payments  on  his  taxi  medallion  loans  altogether.  According  to  Sterling  Employee- 

-2TGohen  informefiSterling,  in  sum  and  substance,  tlmt^  Ms  to  pay  the  mont^ 

principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterlmg 
and  Mekose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 
September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterlmg,  among 
other  things,  the  banlc’s  credit  underwriting  committee  determined  (and  memorialized  m  a 
December  2017  memorandum)  that  the  Cohen- favorable  for  the  banlc 
—  that  is,  that  ^^^^^^^vould  be  a  better  borrower  than  Cohen, 

q.  On  or  about  December'26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  The  demand  letter  was  addi-essed  to  Cohen  at 
Subject  Premises-1.  On  December  29,  2017,  Sterling  sent  Cohen  a  letter  stating  that  he  was  in 
default  under  the  loans  between  Sterling  and  Cohen’s  medallion  corporations.  The  notice  of 
default  was  addi'essedto  Cohen  at  Subject  Premises-1.  Cohen  didnot  make  an  immediate  payment 
on  the  loans,  but  instead  sent  an  e-mail  to  Sterling  Employee-1  on  or  about  January  24,  2018, 


Based  on  my  review  of  property  records  maintained  by  the  City  of  New  Yorlc,  and  my 
participation  in  an  interview  with  Getzel,  I  Imow  that  in  2013, 

a  ttust  He  did  not  disclose  that  transaction  to  Getzel  or  Sterlmg  until  in  or  about  September  2017. 
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stating  that  during  the  closing  of  the  Cohei^^^^^^^|i'ansaction,  Cohen  would  biing  all 
payments  up  to  date  as  well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  on 
January  24, 2018,  that  at  tire  closing  of  the  Cohen-^^^^|i'ansaction,  Sterling  provide  a  letter 
stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal  guarantees  of  the 
medallion  loans  had  been  teiTuinated. 

r.  The  Cohen-^H||||^^|ransaction,  however,  did  not  close.  On  or  about  January 

29,  20 1 8,  attoi’ney  emailed  attorneys  for  Sterling  and  stated  that  at  this  time 

there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have  changed  and  we  ai-e  not  prepai-ed 
to  go  forward.” 

s.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  loiow  that  after  the  Cohen-^^^^^^|ieal  fell  apart. 
Sterling  assigned  Cohen’s  loans  to  Sterling  Employee-3,  who  specializes  in  collecting  on 
defaulting  loans.  From  my  participation  in  an  interview  with  Sterling  Employee-3,  my  review  of 
telephone  call  notes  taken  by  Sterling  Employee-3,  and  my  review  of  telephone  records,  I  know 
that  Sterling  Employee-3  spoke  several  times  to  Cohen  on  or  about  January  30, 2018  about  paying 
down  and/or  restructur-ing  Cohen’s  outstanding  taxi  medallion  loans.  On  the  calls,  which  in  total 
lasted  more  than  an  hour,  Cohen  stated  in  sum  and  substance  that  he  did  not  have  more  than 
$1,250,000  to  pay  toward  the  medallion  loans.  On  the  call,  in  the  course  of  reviewing  the  failed 
Cohen-^^^^B  transaction.  Sterling  Employee-3  questioned  Cohen  about  the  price 

mm  was  to  have  paid  for  each  medallion,  and  whether  there  was  a  side  agreement  between. 
Cohen  and^^^^^|  Cohen  denied  that  there  was  any  side  agreement  with^^^^^^ 

t.  On  or  about  January  31,  2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
paying  $500,000  to  bring  the  loans  current  and  $750,000  to  bring  the  principal  balance  to 
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$20,500,000.  Cohen  also  suggested  revised  monthly  interest  payment  amounts.  The  signatee 
block  on  the  email  indicated  that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  On  or 
about  January  31,  2018,  Sterling  Employee-3  responded  to  Cohen  and  stated,  in  sum  and 
substance,  that  Cohen  would  need  to  pay  the  entirety  of  the  overdue  payments  and  pay  down  the 
principal  balance  of  the  loan  to  $20,000,000  (in  total,  a  payment  of  approximately  $1,750,000), 
and  would  need  to  make  lai'ger  monthly  interest  payments. 

u.  On  or  about  February  1,  2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
"[pjayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if  [Sterling]  will  waive 
past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $1.25Qm.”  (Emphasis  in  original.) 
Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial  resources  to  post 
additional  collateral  or  pre-ftmd  monthly  payments.  The  signature  block  on  the  email  indicated 
that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-3,  I  have  learned  that  since  January  30,  2018,  Sterling  has 
continued  to  renegotiate  the  medallion  loans  with  Cohen  based  on  Cohen’s  repi'esentations  about 
his  cuiTent  financial  position.  In  particular,  according  to  Sterling  Employee-3,  Cohen  and  Sterling 
have  an  agreement  in  principal  to  restructui'e  Cohen’s  loans  based  in  part  of  Cohen  s  agreement  to 
make  a  principal  payment  of  approximately  $750,000,  to  make  a  payment  of  $500,000  to  become 
current  on  interest  payments,  and  to  post  $192,000  in  cash  collateral  for  his  future  monthly 
payments  on  the  loan.  Cohen  also  agreed  to  pledge  an  interest  he  had  in  a  properiy.  Sterling 
Employee-3  has  stated  that  had  Cohen  indicated  he  had  more  than  $1,250,000  available  to  him. 
Sterling  would  have,  among  other  things,  negotiated  for  a  larger  reduction  to  the  principal  amount 
of  the  loan. 
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(ii)  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 
from  Sterling  andMekose  CashPeriyed  from  ConsultjngJM 
17.  As  set  forth  in  detail  below,  despite  multiple  wiitten  and  oral  representations  by 
Cohen  to  Sterling  (and,  by  extension,  Mehose^^)  that  he  had  insufficient  funds  to  pay  down  the 
principal  balance  of  the  medallion  loans,  make  monthly  .interest  payments,  or  pay  past-due 
amounts,  it  appears  that  between  2016  and  the  present,  Cohen  opened  and  maintained  banlc 
accounts  at  Fkst  Republic  Banlc  (“First  Republic”),  and  then  received  millions  of  dollars  in 

-e0nsulting-paymentsinthese^acfiQiints,:gMghM  did  not  disclose  to  Steriing.  Cohen  set  up  these 

accounts  and  received  these  funds  during  the  very  period  in  which  he  made  disclosures  to  Sterlmg 
about  his  personal  finances  (including  his  assets  and  liabilities)  and  his  ability  to  malce  payments 
on  the  medallion  loans.  In  these  disclosm-es  to  Sterling— and  despite  being  asked  about  these  banlc 
accounts  by  his  accountant-Cohen  misled  the  banlc  by  claiming  he  had  insufficient  liquidity  to 
satisfy  his  obligations  or  meet  the  banlc’s  demands,  while  withholding  information  about  these 

ongoing  revenue  streams  and  liquid  financial  assets  at  First  Republic. 

18.  Specifically,  based  on  my  review  of  documents  and  banlc  records  produced 
pursuant  to  a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of 
intei-viewswith  a  First  Republic  sales  manager  (“FirstRepublic  Employee-1”)  and  aFnstRepublic 
senior  managing  director  (“First  Repubhc  Employee-2”),  I  have  learned,  among  other  things,  the 


following: 


16  Based  on  my  review  of  a  report  of  an  interview  conducted  with  m  employee  of  Mehose,  I 
have  learned  that,  pm'suant  to  the  participation  agreement  between  Sterling  ^d  Melrose,  Cohen 
.nd  other  records  in  Sterling’s  possession  were  forwai'ded  to  Mek^hgt 


have  learnea  mai,  puitiuauL  lu  jja*.  - - ^ 

financial  statements  and  other  records  in  Sterling’s  possession  were 

Mekose  could  malce  a  determination  as  to  whether  to  approve  of  the  Cohen-  L — ^ - 

transaction.  Based  on  my  review  of  reports  of  interviews  wjjjyAelroseemployees,  1  also  know 
.  .  j-  ^  - - A action. 


transaciiuii.  -  i  n  u  \ 

that  Cohen  called  employees  at  Mekose  regaining  the  Cohenj 
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a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately  |- 

f 

|_ 

June  2011.  Cohen  controls  several  checking  and  loan  accounts  at  First  Republic,  some  in  his  own  | 

name  and  others  in  the  names  of  corporate  entities.  According  to  First  Republic’s  know-your- 
customer  records  on  Cohen, his  primary  physical  address  is  the  address  for  Subject  Piemises-1 . 

b. .  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new  | 

i  jr^ 

checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential  i 

Consultants  Account”).  Cohen  was  the  only  authorized  signatory  on  the  account.  According  to  i 

account  opening  documents,  the  primary  address  for  Essential  Consultants  LLC  was  the  address  | 

;  ^  I 

for  Subject  Premises-1.  When  Cohen  opened  the  Essential  Consultants  Account,  Fnst  Republic  | 

I 

Employee-1  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your-  | 

customer  questions  about  the  purpose  of  the  account— the  answers  to  which  First  Republic 

Employee-1  entered  into  a  form^®^ — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 

Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 

work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  j 

Cohen  also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the  j 

revenue  from  his  consulting  business — ^which  he  said  was  not  his  main  source  of  income  sepai'ate  j 

from  his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s  r 

f 

statements  about  the  intended  pmpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  as  described  below,  the  account  was  not  intended  to  receive — ^and  does  not 


n  Qeftain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  3 1  U.S.C.  §  53 1 8;  3 1  CE.R.  §  1020.220. 

First  Republic  Employee-1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  banlc  compliance  personnel,  Fu'st 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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appear  to  have  received-money  in  connection  with  reai  estate  consulting  work;  in  addition,  the 

account  has  received  substantial  payments  from  foreign  soui-ces. 

c.  I  Imow  from  my  review  of  First  Republic  bank  records  that  were  scheduled  by  an 

FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account.  Cohen 
received  payments  into  that  account  ftom  foreign  businesses  and  entitles  that  do  not  reflect  the 

stated  client  profilefor  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 

fiom  my  review  of  the  Essential  Consultants  Account  schedule  and  public  somees.  I  know  the 

Mtowifrg:  -  -  —  ^ 

i.  Beginning  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 

payments  of  $83,333  into  the  Essential  Consultants  Account  from  an  entrty  called  Columbus  Nova 

LLC.Accordingto public  sources,  Columbus Novaisanlnvcstmentmanagcment firm  controlled 

by  Renova  Group,  an  industrial  holding  company  based  in  Zurich.  Switzerland  that  is  controlled 
by  Russian  national  Viktor  Vekselberg.  From  January  2017  to  August  2017,  the  Essential 
Consultants  Aecount  received  seven  payments  totaling  $583,332.98  from  Columbus  Nova  LLC. 

ii.  Beginning  on  or  about  April  5,  2017,  lie  Essential  Consultants  Account 
began  receiving  payments  from  Novartis  Investments.  SARL,  which  I  believe  to  be  the  in-house 
financial  subsidiary  of  the  Swiss  pharmaceutical  company  Novartis  Internattonal  AG  (  Novartrs  ). 
Between  April  2017  and  Febrrrary  2018.  the  Essential  Consultants  Account  received  eleven  wu-e 
payments  from  a  Swiss  banlc  account  held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980. 

for  atotal  of  $1^099,780. 

iii.  Beginning  in  or  about  April  20 17,  the  Essential  Consultants  Account  started 

r«reivi„g  wire  payments  from  a  bank  account  associated  with  the  telecommunications  company 
Amr  Inc.  (“AmT”).  specifically,  on  or  about  April  14,  2017,  AT&T  sent  $100,000  to  the 
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Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  ten  $50,000  payments  from  AT&T.  In  total,  AT&T  sent 

$600,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10, 2017,  June  9,  2017,  July  10, 2017,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is  Korea  Aerospace  Industries  Ltd.  (“ICAI”).  I^  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 

Department  of  Defense,  among  other  customers. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommeitsbanlc,  a  Kazalchstani  bank.  The  listed  account 
holder  at  ICazkommertsbank  was  a  second  Kazalchstani  banic  named  BTA  Bank,  AO.  A  message 
accompanying  the  wfre  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
friv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 

vi.  In  total,  from  on  or  about  January  31, 2017  to  on  or  about  February  1, 2018, 
the  Essential  Consultants  Account  received  approximately  $3,033,1 12.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  10, 2018,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23.  Cohen’s  withdrawals  from  the  Essential  Consultants 
account  reveal  that  it  was  used  for  largely  personal  purposes,  including  to  pay,  among  other  things, 
American  Express  bills  and  fees  from  “the  Core  Club,”  a  private  social  club  in  New  York. 

d.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checldng  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  MDC&A  Account  ). 
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Cohen  was  the  only  authorized  signatory  on  the  aeoount.  According  to  account  openmg 
documents,  the  primary  address  for  MDC&A  Account  was  the  address  for  Subject  Pr-emrses-l. 
Among  other  things,  the  MDC&A  Account  i-eceived  ten  whe  transfers  and  one  check  from  an 
account  in  the  name  of  Squil-c  Patton  Boggs,  a  law  firm.  As  noted  above.  Subject  Pr.mises-2  is 
located  inside  the  New  York  offlee  of  Squire  Patton  Boggs.  In  total,  from  on  or  about  April  5, 
2017,  to  on  or  about  January  2, 2018,  the  MDC&A  Account  received  $426,097.70  In  deposits,  and 
Are  balance  in  the  account  as  of  January  2.  2018.  was  $344,541.35.  As  discussed  below,  Cohen 

-neverdisclosed  any- of-th^balancc-in4he.  EssentLaLGmsiUfau^t 

during  the  negotiations  with  respect  to  the^^^ransaction  or  the  subsequent  loin 
refinancing  negotiations,  including  in  his  May  2017  Financial  Statement  and  September  2017 

Financial  Statement. 

19.  Based  on  my  review  of  emails  that  were  seized  pursuant  to  the  Cohen  Email 
Warrant,  and  my  review  of  reports  of  interviews  with  employees  of  AT&T  and  Novartis,  it 
appears  that  the  aforementioned  payments  to  the  Essential  Consultants  Account  and  MDC&A 
Account  were  for  political  consulting  work,  including  consulting  for  international  clients  on  issues 
pending  before  the  Tramp  administration.  Specifically,  from  my  review  of  emails  frpm  the  Cohen 
Gmail  Account,  the  Cohen  MDCPC  Account,  and  public  sources,  I  have  learned  the  followmg: 

a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe 
is  affiliated  witli  KAf,  In  the  email.  Cohen  attached  a  “Consulting  Agreement”  between  ICAI  and 
Essential  Consultants  dated  as  of  about  May  I,  2017.  The  agreement  indicates  that  Essential 
Consultants  had  the  address  of  Subject  Premiscs-2.  The  document  indicates  that  Essential 
Consultants  would  render  “consulting  and  advisory  services,  as  requested”  by  KAI,  and  that  KAI 
would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Two  Hundred  Thousand 
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($1,200,000.00)  US  Dollars,”  disbursed  through  eight  $150,000  installments  between  May  2017 
and  December  2017.  I  have  also  reviewed  invoices  in  amounts  of  $150,000  that  Cohen  emailed 
to  an  individual  whom  I  believe  is  affiliated  withM,  At  the  top  of  the  invoices  the  address  listed 

for  Essential  Consultants  is  the  address  for  Subject  Premises-2. 

b.  On  or  about  May  8, 2017,  Cohen  sent  an  email  to  an  individual  whom  I  beHeve  is 

affiliated  with  BTA  Bank.  The  signatoe  block  on  Cohen’s  email  listed  “Essential  Consultants 
LLC”  and  “Michael  D.  Cohen  &  Associates,  PC”  and  provided  the  address  for  Subject  Premises 

2-ffi  the-email7  Cohemattaehed-a  doGumentpuiportingio_be_aACmLSjMiig  Agreem^^ 

BTA  Banlc  and  Essential  Consultants  dated  as  of  about  May  8, 20 17.  The  agreement  indicates  that 
Essential  Consultants  had  the  addi-ess  of  Subject  Premises-2.  The  document  indicates  that 
Essential  Consultants  would  render  “consulting  and  advisory  seiwices”  to  BTA  Bank,  and  that 
BTA  Bank  would  pay  Essential  Consultants  “a  consulting  fee  of  One  MiUion  Eight  Hundi-ed 
Thousand  ($1,800,000.00)  US  Dollars,”  disbursed  through  monthly  payments  of  $150,000.  On  or 
about  May  10, 2017,  Cohen  sent  an  email  to  an  employee  of  BTA  Banlc,  and  attached  to  the  email 

an  invoice  to  BTABanlc  in  the  name  ofEssential  Consultants,  with  the  address  of  SubjectPremises- 
2.  The  invoice  contemplated  a  $150,000  payment  to  Essential  Consultants  for  a  “monthly 

consulting  fee.” 

c.  On  or  about  January  23,  2017,  Cohen  appears  to  have  entered  into  a  consultmg 
agi-eement  with  AT&T,  which  contemplates  that  Essential  Consultants  “shall  render  consultng  and 
advisory  services  to  [AT&T]”  andthat  AT&T  would  “advise  [Essential  Consultants]  of  those  issues 
and  matters  with  respect  to  which  AT&T  Services  desires  [Essential  Consultants] ’s  assistance  and 
advice.”  The  agreement  indicates  that  Essential  Consultants  had  the  addi'ess  of  Subject  Premises- 
1.  The  contract  calls  for  AT&T  “to  pay  tlie  Consultant  for  his  services  ...  a  consultmg  fee  of  Fifty 
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Thousand  ($50,000)  Dollars  .  . .  per  month.”  Based  on  my  review  of  reports  of  interviews  with 
AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen  to  consult  on  political  issues, 

including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner,  and  tax  lefoim. 

d.  On  01  about  March  1, 20 17,  Cohen  appears  to  have  entered  into  a  contact  between 

Novartis  and  Essential  Consultants,  which  provides  that  Essential  Consultants  will  “provrde 
consulting  and  advisory  services  to  Novartis  on  matters  that  relate  to  the  repeal  and  replacement  of 
the  Affordable  Cate  Act  in  the  US  and  any  other  issues  mutually  agreeable  to  DSssential 

-eonsultants]-and-Novartis21Jhe-contract.p^^^  ..“co.nsultingfeeolOne  MilUon  Two 

Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to  Essential  Consultants  in  equal  monthly 
installments  over  the  course  of  a  year.  Based  on  my  review  of  reports  of  interviews  wlthNovartrs 
employees,  I  have  learned  thatNovartis  retained  Cohen  to  provide  political  consulting  services  and 

to  gain  access  to  relevant  policymalcers  in  the  Trump  Administration. 

e.  In  or  about  February  2017,  Cohen  began  negotiating  the  terms  of  a  “strategrc 
alliance”  with  Squire  Patton  Boggs.  On  or  about  March  4,  2017,  Squire  Patton  Boggs  emailed 
Cohen  a  “strategic  alUanee  agreement,”  Under  the  terms  of  the  agreement,  Cohen  agreed  to 
generate  business  for  the  law  firm,  and  Squhe  Patton  Boggs  agreed  to  pay  to  Cohen  “an  annual 
strategic  alUanee  fee  of  $500,000,  payable  in  twelve  (12)  equal  monthly  installments.”  Squire 
Patton  Boggs  also  agreed  to  provide  Cohen  with  “dedicated  and  segregated  office  space  in  [Squrre 
Patton  Boggs’s]  New  York  and  Washington  D.C,  offices,  which  office  space  shall  be  physically 
separate  from  [Squire  Patton  Boggs’s]  offices  and  have  locked  doors  and  its  own  locked  file 
cabinets.”  On  or  about  April  3,  2017,  Squhe  Patton  Boggs  announced  on  its  website  that  is  had 
fonned  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would  “jointly  represent 

clients.” 
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20.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 

notdiscloselhatinformationtoSterlingorMelrose.  Specifically,  based  on  my  review  of  documents 

provided  by  Getzel  (as  noted  above,  Cohen’s  accountant  at  the  time),  my  participation  m  an 
interview  with  Getzel,  and  my  review  of  notes  and  ^ 

have  learned  the  following: 

a.  In  or  about  May  2017,  Getzel  met  with  Cohen  at  Subject  Premises-2.  At  the 

■meettagrGohemtold  Getzel,-in  auiu  andsubstance,  that  heJiadMupJtJaw  caUed  Michael 

D.  Cohen  &  Asaociates  P.C.,  and  a  consulting  company  called  Essential  Consultants  LLC.  Cohen 
told  Getzel,  in  sum  and  substance,  that  he  expected  to  eatn  $75,000  per  month  in  connection  with 
his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to  be  between  five 

and  six  million  dollars  annually . 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  prepaiing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6, 20 17,  Getzel  sent  an  email  to  Cohen  in  which  Geteel 
wrote  that  “[a]ttached  is  a  draft  of  the  new  PFS  as  of  September  30, 2017”  and  attached  a  draft  of 
the  September  2017  Financial  Statement.  The  di'aft  statement  reflected  that  as  of  September  30, 
2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately  $33,430,000  (comprised  of 
taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence  andproperiy),  and  liabilities 
of  approximately  $45,630,000,  leaving  him  purportedly  over  $12  million  in  debt.  Inthe  same  email, 
Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact  that  the  financial  statement  did  not 
list  any  value  associated  with  either  the  Essential  Consultants  Account  or  the  MDC&A  Account: 
“[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  -  Michael  D.  Cohen  &  Associates 
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POO  M  and  Esaenlial  ConsuKants  LLC.  Please  advise  whether  or  not  these  should  be  disclosed 
and  what  value.” 

c.  On  or  about  October  6, 2017,  Cohen  called  Qetzel  by  telephont^-vdiich  is  reflected 
on  toll  records  for  Cohen’s  cellphone-^d  told  Geteel,  in  sum  aud  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  toy  had  no 
value.  On  or  about  October  6,  2017,  following  the  cali  with  Getzel.  Cohen,  using  the  Cohen 
Account,  responded  to  Gael’s  emaii  with  to  answer  “[Hooks  good  to  me."  Cohen  never  directed 
Getol  to  mage  ansr-changes do  his  cash  -positiomasjisted.  in  th^&Bembe,  2017  Financial  _ 
Statement.  In  a  leto  dated  October  6. 2017.  addressed  to  Getzel.  Cohen  stated.  “I  have  reviewed 
to  attached  statement  of  financial  condition  and  find  it  to  be  correct  and  consistent  wit  to 
representations  tot  1  made  to  your  frrm.  The  attached  is  an  accurate  reflection  of  nay  assets, 
liabilities  and  net  worth  (defreit)  as  of  September  30.  2017.”  Attached  to  that  letter  was  to 
September  2017  Financial  Statement,  which,  as  noted  above,  was  ton  transmitted 

connection  withthe proposed  taximedallion  transaction  between  Sterling,  Cohen.  anr^^B 

21.  Based  on  my  review  of  a  report  of  an  interview  with  Sterling  Employee-1, 1  have 
learned  that  Cohen  did  not  disclose  his  income  steeam  lorn  Essential  Consultents  to  Sterling 
Employee-1  or,  to  his  knowledge,  anyone  else  at  Sterling.  Accordmg  to  Sterlrng  Employee  1, 
lorowledg.  of  such  an  income  stream  would  have  affected  Sterling’s  demands  during  to 
negotiations,  particularly  with  respect  to  the  amount  of  a  principal  paydown  of  Cohen’s  debt. 

Pnldpn  T  Tnde,r.stated  His  Available  Cash 

22.  In  addition  to  wlthlrolding  the  existence  of  his  Essential  Consultants  Income  fl-om 

Sterling  and  Melrose,  it  appears  tot  Cohen  also  substantially  understated  his  available  cash  and 
cash  equivalents  in  his  financial  disclosm-es.  Specifically.  I  know  torn  my  review  of  the  September 
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2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen  reptesented  tot  he  had 
$1^50,000  in  cash  as  of  September  30, 2017.  I  also  know  tot  on  or  about  January  30, 2018.  in  a 
•  telephone  oaU  wite  Sterlhrg  Employee-3,  and  on  February  1.  2018.  hr  an  email  to  Sterlmg 
Employee-3,  Cohen  represented  that  he  did  not  have  more  ton  $1,250,000  in  cash.  But,  hom  my 
review  of  a  summaiy  of  bank  records  that  were  scheduled  by  forensic  accountants,  I  have  learned 
that  Cohen  had  approximately  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30, 2017. 
Additionally,  as  of  Febr-uaty  1,  2018,  Cohen  had  approxhnately  $6,000,000  in  cash  and  cash 

-^iralenBrSpedfically.tommyreviewoftheaccountschedri^^ 

the  following: 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30.  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank.  As  of  February  1, 
2018,  Cohen  hadatotal  of  $1,389,245.78  in  these  accounts. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 

2017.  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 
As  of  February  1.2018.  Cohen  had  $1,284,996.13  in  these  accounts. 

c.  AsofSeptember30,2017,Cohenhad$260,689.18inanaccountatSignatureBank. 

As  of  February  1,2018,  Cohen  had  $261,517,55  in  this  account. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 

Republic,  Cohen  alsohadtwojointchecking  accounts  withLaur.aCohenatFtoRepublic.Intotel. 

as  of  September  30, 2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic.  As  of  February  1. 2018.  Cohen  had  $3,332,992.95  in  these  accounts. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30, 2017. 

f.  As  of  September  30, 2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Banlc— one  in  his  name  and  one  held  jointly  with  his 

wife.  Cohen  also  has  a  safety  deposit  box  at  TD  Bank-Subject  Premises-3.  The  safety  deposit 

box  was  opened  on  December  13, 2017  in  the  names  of  Michael  and  Laura  Cohen. 

h.  In  total,  as  of  September  30, 2017,  Cohen  had  at  least  $4,713,935.08  in  his  accounts 

aLCapital  One Banlt,-City^National  Banlc,  SigMtureMgk.,^e4^-M 

First  Republic,  and  Morgan  Stanley.  As  of  Febmaiy  1,  2018,  Cohen  had  $6,268,732.59  m  his 
accounts  at  Capital  One  Bank,  City  National  Banlc,  Signature  Banlc,  First  Republic,  and  Morgan 

Stanley. 

23.  Accordingly,  based  on  the  foregoing,  it  appeal's  that  Cohen’s  written  and  oral 
representations  to  Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and 
that  Cohen  withheld  information  regarding  approximately  $5  miUion  in  funds  from  Sterling  and 
Meh'ose  in  order  to  secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on 


my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews 
with  Sterling  Employee-1  and  two  Mekose  employees,  it  is  my  understanding  that  that  Sterling 
and  Mekose  would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to 


renegotiate  Cohen’s  medallion  loans  and  on  what  terms,  or  to  its  decision  whether  approve  of  the 
transfer  of  those  loans  tol 


Based  on  my  review  of  the  account  schedules  described  above,  I  Icnow  Aat,  as  of  *e  date  of  this 
affidavit,  the  Jccount  balances  for  TD  Bank  have  not  yet  been  included  m  *0  schedule  orthei 
date  and  the  account  balances  for  Sterling  National  Banlc  and  Bethpage  Credit  Umon  have  not  yet 
been  included  in  the  schedule  for  February  1,  2018.  Uius,  to  the  extent  that  these  accounts  have 
positive  balances,  Cohen’s  total  balances  in  fact  were  even  higher  on  these  dates. 
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Cohen  Fas  Tin  reported  Interest  Income 

24,  It  appears  that  Cohen  also  hid  from  Sterling  interest  Income  that  he  was  receiving  in 
connection  with  a  six  million  dollar  loan  he  made  to  another  individual.  Specifically,  I  know  from 
my  review  of  the  May  2017  Financial  Statement  and  September  2017  Financial  Statement  that 
Cohen  provided  to  Sterling  that  Cohen  did  not  disclose  that  he  had  made  a  note  receivable  in  the 
amount  of  approximately  $6  million,  or  that  he  was  earning  approximately  $60,000  per  month  in 
interest  income  in  connection  with  that  loan.  But,  from  my  review  of  a  summary  of  bank  records 
that  were  reviewed  by  another  law  enforcement  agent,  my  review  of  property  records  and 

documents  obtained  pursuant  to  the  Cohen  Email  W^arrants,  and  my  participation  in  an  interview 
with  Getzel,  I  have  learned  the  following: 

a.  Based  on  my  review  of  property  records,  I  have  learned  that  on  or  about  March  12, 

approximately 

$2,000,000.^®  It  appears  that  the  promissory  note  was  unsecured  by  any  real  property.  On  or  about 
April  28,  2014,  Cohen  an<^^^^|amended  the  promissory  note,  and  restructured  the  loan  to 
increase  the  principal  amount  to  approximately  $5,000,000.  Under  the  terms  of  the  amended 
promissory  note,  the  loan  was  secured  by^^^^^^|ipartment  in  Sunny  Isles  Beach,  Florida.  On 
or  about  April  8, 2015,  Cohen  and^^^Jestated  the  promissory  note  to  increase  the  principal 
amormtto  $6,000,000.^* 

b.  Based  on  my  review  of  a  copy  of  the  restated  note,  which  was  obtained  pursuant  to 
the  Cohen  Email  Warrants,  I  have  learned  that  under  the  terms  of  the  amended  and  restated 


I  learned  from  Getzel  thall 


The  note  states  that  the  loan  is 
jointly  and  severally.  For  ease  of  reference,  I  refer  simply  tol 
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p,.omisso.7  note,  Cohen's  loan  an  tos.-only  loan,  and  that  flte  principal  balance 

of  the  loan  beant  interest  at  an  annual  rate  of  12.25  percent.  I  also  Icnowte^amended  and 
restated  pronrissory  note  includes  a  schedule  of  payments  that  reqnn-e  pay  Cohen 

approximately  $61,250per  month  beginning  in  April  2015  and  ending  in  April  2019.  The  note  also 

requires  thai^H°P'>y 

o.  Based  on  my  review  of  bank  records,  I  have  learned  that,  consistent  with  the  terms 
of  the  amended  and  restated  promissory  note.^^^^as  made  monthly  payments  of 
~;ippfflma.ely$6-t;250-sin»^^^^^^^ 

hyCapltalO„eBank.Ihavelem-nedthatf.omApril  201510  October  2015.  Cohenr^lvedchecks 

$61,250  per  month,  which  he 

fL-om  an  entity  called 

deposited  intohis  personal  bankacconnt  at  capital  one  Barat.^ltappears  tommy  .teviewof  bank 

records  and  public  soui-ces  that^^^|'S  the  oAvner  of 

From  my  review  of  records  maintained  by  Capital  One  Banlq  1  have  also  learned  that  since  October 

totaling 

2015,  Cohen  has  i-eceived  checks  fcom  an  entity  ca 

$61,250  per  month,  which  he  deposited  into  his  personal  bank  account  at  Capital  One  Banlc.  It 
appeai-s  from  my  review  of  banlc  records  and  public  sources  that^^His  also  the  ownei  of  i  J 

In  total,  it  appears  that  Cohen  receives  approximately  $735,000  per  year 

in  interest  payments  froni^^^^^l 

d.  Based  on  my  review  of  Cohen's  May  2017  and  September  2017  Financial 

Statements, my  review  ofhls2015and2016tax  returns  obtained  via  subpoena  andtom  the  Cohen 

Email  Wan-ants,  and  my  participation  in  an  interview  with  Geteel,  I  have  learned  that  Cohen  d.d 


a  pro-mted  payment.  For  all  months  thereafler,  the  total  payment 
eq!:iXi;ii  butBBaften  made  ttre  payment  in  multrple  checks. 
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not  disclose  this  interest  income  he  was  receiving  fror^^^^^^;o  Sterling  or  Mekose,  or  list  it 
on  his  tax  returns.  I  have  also  learned  that  while  this  interest  income  is  taxable,  Cohen  did  not  tell 
Getzel — his  accountant — ^about  the  income,  and  Getzel  only  learned  about  the  income  because  he 
began  doing^^^^^^ taxes  in  2017.^^ 

25.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to 

Sterling  and  Mekose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen 
withheld  information  relating  to  the  interest  income  he  is  receiving  from  in  order  to 

secui'e  favorable  terms  in  his  renegotiation  of  his  medallion  loan. 

Cohen  Had  a  Side  Agreement  With 

26.  As  set  forth  in  detail  below,  during  the  course  of  Cohen’s  negotiations  to  sell  his 

interest  in  taxi  medallions  and  the  associated  debt  to  Cohen  not  only 

misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  agi-eementhe 
had  negotiated  with^^^^^^^t  appeal's  tha^^^^^^^igreed  to  pay  an  above-market  price 
for  Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay  approximately 

$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  my  paificipation  in  intei-views  with  Sterling  Employee- 1,  Sterling  Employee-2, 
and  Sterling  Employee-3, 1  have  leai-ned,  among  other  things,  the  following: 

a.  Oh  or  about  September  5, 2017,  an  executed  teim  sheet  was  ckculated  by  Sterling 
Employee-1  to  Cohen  and^^^^^^^^^|  The  term  sheet  listed  Cohen  s  addiess  as  the  addiess  foi 
Subject  Premises-1.  According  to  the  term  sheet,  would  borrow  $20,000,000 

fi'om  Sterling  and  Mekose,  to  be  secured  by  the  medallions  tha^^^^^^ivas  to  acquke  from 


Accordingly,  this  interest  incom^which  should  have  been  reported  as  such  on  Cohen’s  tax 
returns — ^is  included  herein  in  calculations  of  Cohen’s  true  cash  position. 
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Cohen.  At  a  price  of  $20  ntillion  for  thirty-two  taxi  medallions,  the  proposed  transaction  valued 
each  medallion  as  worth  $625,000.  The  term  sheet  also  contemplated  a  $1,265,913  pay-down  of 
the  principal  balance  of  the  loan.  The  term  sheet  made  no  mention  of  a  $3.8  million  payment  ftom 
Cohen  to  any  other  form  of  payment  or  financial  transacUon  between  the  parties . 

b.  Additionally,  an  internal  Sterling  credit  memorandum.  date^dobe^017. 
describing  the  terms  ofthe  Cohen-^^Btansaction  and  the  new  loan  to^^^Hd><l 
not  mention  any  payments  fmm  Cohen  to^^mcluding  a  $3.8  million  payment.  The 

-TihSmahdimralsohOted-that-the-loan-amonnt-of42 

medallion”  but  “it  is  recognized  tat  this  is  not  in  line  with  eutrent  market  values.”  Indeed, 
ae^rding  to  an  internal  Sterling  memorandum  dated  Februmy  5.  2018.  in  the  month  of  Janua^ 

2018.tatd  medallions  soldforamountsrangingfromS120,000to  $372^000^^^^^ 

Employee-1  and  Sterling  Bmployee-2.  they  were  never  told  that  ^^^^agreed  to  a  puleha 
price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  oi  that  Cohen  w 

e.  On  or  about  January  30.  2018.  Sterling  Employee-3  aslced  Cohen  whether  Cohen 

,  . .  „av  sum  of  money  for  entering  into  the 

had  a  side  agreement  with 

medaiuon  tnmsaetion.  Sterling  Employee-3  asked  Cote^t  such  an  arrangement  because, 
according  to  Sterling  Bmployee-3.  the  price  tat  ^^was  paying  for  each  medallion 
appeared  to  be  well  above  the  market  price.  Cohen  state^n«d  substance,  that  he  had  no 
side  agreement— tmd  never  had  a  side  agreement— witl^^^^^l 

27.  mac  Cohen  and^^^^lM  no* 

communications  with  Sterling,  it  appears  tat  such  a  payment  was  contemplated. 

indeed,  based  on  my  review  of  recotds  maintained  by  Getzel,  and  my  participation  in  an  interview 
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wift  Getzel,  I  have  learned  fte  foUowing,  in  substance  and  in  part,  repuding  dte  proposed  side 

payment  from  Cohen  to 

a.  On  or  about  September  19.  2017,  Oetzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  “Gebel  Memorandt^ 
The  Qeteel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and^^H 
in  part,  as  follows:  “Michael  and  Laura  Cohen  wUl  transfer  ownership  oftheir  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  then  bank  indebtedness,  upon  the  [Cohens’]  paying  down  the 

’-diRpgfbhodftlirtS-entittes-by-SSOO.QOOandam^  - 

b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 
payment  of  $3,800,000  to^^| «  Getzel  did  not  Imow  where  Cohen  was  going  to  obtain 
$3,800,000  to  pay^^l  As  noted  above,  Cohen  had  mom  than  $5,000,000  in  cash  and 
cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 

Statement  that  he  had  $  1 .25  million  in  cash. 

28.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Meh'ose,  the  banlc 
withttie  partoipating  interest  in  4e  loans)  and  reports  of  inteiviews  ofiepiesentatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Mehose,  or  any  other  flnancial  institution 
involved  in  the  potential  deal  with  Cohen  and  ^^was  aware  of  the  planned  $3.8  mlUron 

side  payment  from  Cohen 

The  Illegal  Campaign  Contribution  Scheme 

29.  The  USAO  and  FBI  are  also  investigating  a  criminal  violation  of  campaign  fmanee 

laws  by  Michael  Cohen.  As  set  forth  below,  there  is  probable  cause  ,0  believe  drat  Cohen  made 


^''I^referenceiiithwirn  medallions  appears  to  be  an  ener  by  Getek  Cohen  and  his  wife 
together  Lned  sixteen  corporations,  which  in  turn  owned  32  taxr  medallrous. 
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an  excessive  in-kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald 
Trump  in  the  form  of  a  $1 30,000  payment  to  Stephanie  Clifford,  an  individual  who  was  rumored 
to  have  had  an  extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that 
alleged  affair.  As  set  forth  below,  there  is  probable  cause  to  believe  that  this  payment  was  intended 
to  keep  Clifford  from  making  public  statements  about  the  rumored  affak  on  the  eve  of  the  2016 
presidential  election,  and  thus  constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 

30.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 
TheDirty.com  that  Trump  had  had  an  extramarital  affah  with  Clifford,  an  adult  film  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occmred  between  Tramp  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  aiticles. 

b.  Specifically,  on  or  about  October  1 1 , 20 1 1 ,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  E!  News  that  “[t]he  totally  untrae  and  ridiculous  stoiy  . . .  emanated  from 

a  sleazy  and  disgusting  website _ The  Tramp  Organization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit .  .  .  [and]  Mi-.  Trump  and  the  Tramp  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

31.  On  or  about  June  16,  2015,  Tramp  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4, 2016,  Trump  became  the  presumptive  Republican  Pai-ty  nominee 
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for  president,  and  on  July  19, 2016,  Trump  ojadally  became  the  nominee.  Based  on  my  rev.e» 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  Utle  as 
part  of  the  Tramp  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Tramp  or  his  campaign.  For  instrmce.  on  or  about  August  18.  2016,  Cohen  appeared  on  CNN  to 
defend  Tramp’s  polling  numbers. 

32.  On  or  about  October  7,  2016,  The  Washington  Post  published  online  a  video  and 
accompanying  audio  in  which  Trump  refemed  to  women  in  what  the  article  described  as  “vulgar 

-fenns’’-ina2005-conversatiomwithBilly-Bush, 

following  day,  on  October  8,  2016,  Ti-ump  appeared  in  a  video  in  which  he  stated,  among  other 
things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  Imows  me  knows  these  words  don  t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  loaow  that 
representatives  of  the  Tramp  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

33.  Based  on  my  review  of  public  sources,  including  an  article  published  in  S 
magazine  by  a  reporter  who  lute, viewed  Clifford,  I  have  learned  that  auund  this  same  time,  in  or 
about  October  2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and 
SMe  magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement 
about  her  aUeged  relationship  with  Trump.  According  to  the  article  in  SMe,  which  the  author 
based  on  conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to 
be  paid  for  her  stoo-  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summariz«l 

ma2018emaU  obtained  pursuant  to  the  CohenEmaUWaivants:  “In  October2016,lwas  contacted 
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by  counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  20 1 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

34.  From  my  review  of  telephone  toll  records^^  and  information  produced  pursuant  to 
the  iCloud  WaiTant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 
Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer, Trump,  and  Hope  Hicks,  who  was  then 
press  secretary  for  Trump’s  presidential  campaign.  Based  on  the  timing  of  these  calls,  and  the 
content-  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  commuirications 
concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  theffcce^^ 
Hollywood  story.  In  particular,  I  have  learned  the  following; 

a.  On  October  8, 20 1 6,  at  approximately  7 ;20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes. 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 


^  My  attribution  of  certain  telephone  numbers  to  certain  individrrals  as  described  in  this 
afiirdavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  liom 
Cohen’s  telephone  pui'suant  to  the  iCloud  War-rant. 

Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.-  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

2’  I  believe  that  Trump  joined  the  call  between  Cohen  and  Hides  based  on  my  review  of  toll 
records.  Specifically,  I  Icnow  that  a  call  was  initiated  between  Cohen’s  telephone  number^  and 
Trmirp’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  tr-aining  and  experience,  means  that  the  call  was  either  transferred  to  Trmtrp,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hides,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  lear-n  about  the  allegations  made  by 
Clifford  until  ear-ly  November  2016.  Hicks  was  not  specifically  asked  about  this  thr-ee-way  call. 
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Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October  8.  2016.  Cohen 
and  Tmmp  had  spoken  once  in  May.  once  in  June,  once  in  July,  zero  times  in  August,  and  hvice 

in  September. 

b.  Approximately  ten  minutes  after  the  call  ended.  Hides  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended.  Cohen  called 
-TiiiviaPecker(ganoted-aboverthe^Piesidentof-AjnericanJiiedialoo..orAMQandthey_c^ed^^^^ 

for  fthty  seconds.  Approxunately  four  minutes  later.  Cohen  called  Pecker  again  and  they  spoke 
for  more  Hum  a  minute.  Three  minutes  after  ending  his  call  with  Pecker.  Cohen  received  a  call 
fi-om  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8, 20 1 6.  as  It  had  been  over  a  month  since  drey  had  called  each 

other. 

d.  At  7:56  p.m..  approximately  eight  minutes  after  his  call  with  Howard  ended.  Cohen 
called  Hicks  and  they  connected  tor  two  minutes.  At  approximately  the  same  time  this  caU  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  tor  about  two  minutes.  At  8:03  pun.,  about 
th.ee  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 

eiglit  minutes. 

e.  At  8:39  pun.  and  8:57  p.m.,  Cohen  received  caUs  from  Howard  and  spoke  to  him 
for  about  tom-  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  Hum  the  second  of  these  calls.  Howard  sent  Cohen  a  text  message  that  said: 
■•Keith  wUl  do  it.  Let's  r-econvene  tomorrow."  Based  on  my  involvement  in  this  investigation,  I 
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believe  .hat  when  Howarf  wtnte  ••Keift,”  he  was  tefemng  to  Keith  Davidson.  attcney  for 
Stephanie  Clifford.  A.  3:31  aan..  now  on  Octtber  9. 2016.  Cohen  sent  Howard  a  text  message  in 

response«said:-Thanlcyon.->Eight  mtantes  later.  CohensentHowardamxtmessa^^ 

“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake. 

please  call  luy  celL” 

£  The  following  day.  on  October  10. 20 16.  at  1 0:58  a. m..  Howard  sent  a  text  message 
to  Cohen  and  Davidson,  which  stated:  “KeittAIichael:  connecting  you  both  in  regards  to  that 
-business  opportuni^.-Spoke-to-the-client-ti,is-AM-and-theyT^^^^^^^^  with  the 

opportunity.  Thanks.  Dylan.  Over  to  you  two.”  At  12:25  p.m..  Davidson  sen.  Cohen  a  text  message 

that  stated:  “Michael if  we  are  ever  going  to  close  this  deal  -  In  my  opmion. 

KeWt.”  Davidson  and  Cohen  ften  spoke  by  phone  tor  about  three  minutes.  Based  on  my 
participation  in  this  investigation.  I  believe  timt  when  Howard  wroto  that  tire  “cllenC  was 
“confirmed  to  proceed  with  the  oppoitunity.”  he  was  refen-ing  to  Clifford’s  agreement  in  prmcrple 
to  accept  money  ffom  Cohen  in  exchange  for  her  .^cement  not  to  d^cs  any  prior  affair  with 

then-candidate  Tramp.^* 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Wan’ants.  I 
lorowtha.  on  or  about  October  10. 2016.  Clifford  andDavidson  appearto  have  signed  a  “side  letter 
agreemenf  drat  stilted  it  was  an  exhibit  to  a  “confidential  settlement  agreenrent  and  mutoal 
release”  betw^  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  tire  document. 


As  set  forth  below,  W  was  also 

However,  because  these  comm^ationsvreie  me  P  Clifford,  and  the 

"gtS't  a^lre"  S'IS  s°evm".l  months  prior  to  ttrese  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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according  to  the  agreement,  was  to  define  the  “tme  name  and  identity”  of  persons  named  by 
pseudonym  in  ^‘confidential  settlement  agreement  and  mutual  release*  The  side  letter  agieement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,  Dennison,  and  theii 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is'^  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreenient”  in 
order  to  facilitate  the  closing  of  a  deal  betvreen  Davidson’s  client  and  Cohen  oi  his  client  on 

October  10, 2016. 

35.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson,  Specifically,  from  my  review  of  toll  records,  infoimation 
obtained  pursuant  to  the  iCloud  WaiTant  and  Cohen  Email  Warrants,  records  maintained  by  Fiist 
Republic,  as  well  as  my  participation  in  interviews  with  First  Republic  employees,  I  have  learned 
the  following: 

a.  On  the  moining  of  October  1 3, 2016,  at  8:54  a.m,,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  tallc  to  you,”  At  9:06  a.m.,  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back  ”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a,m,  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 
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b.  At  9:23  a.m..  Ooheti  sent  an  email  that  stated  “call  me”  to  First  Republic  Employee- 
2.  The  email  attached  documents  fi  om  the  Secretary  of  State  of  Delaware  indicating  that  Cohen 
had  formed  a  limited  liability  company  called  “Resolution  Consultants  LLC”  on  September  30. 
2016.  AS  noted  above,  “Resolution  Consutants”  is  the  name  of  the  entity  tat  Cohen  had  told 
Howard  he  had  formed  recently  after  Howald  said  Davidson  would  “do  It.”  At  10:44  a.m..  Cohen 
called  First  Republic  Employee-2  and  told  him,  in  sum  and  substance,  that  he  needed  an  account 
in  the  name  of  “Resolution  Consultants”  opened  immediately,  and  that  he  did  not  want  an  address 

l^WaeeBwntten-out-oftthe-account^tatemthatday,-anotfaereemployeefe 


emailed  Cohen  account  opening  paperwork  to  complete.  Cohen  relumed  the  account  opening 
documents  partially  completed,  but  failed  to  provide  a  copy  of  his  driver’s  license  or  passport,  and 
did  not  respond  to  the  employee’s  question  of  how  he  wanted  to  fund  the  account.  As  a  result,  the 

account  was  never  opened. 

c.  On  October  17, 2016.  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 

That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

36.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  CUfford, 
and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toil  records,  information  obtained  pursuant  to  the 

iCloud  Warrant,  and  public  sources,  I  Icnow  the  following: 

a.  According  to  an  article  in  The  Washington  Tost,  which  quoted  emails  sent  Horn 

Cohen’semailaocounthostedbythe  Trump  Orgataation.  on  Octob«17.2016.Davidsonemailed 

Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  ttansaction  “  According  to  the  article.  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlemert  agreemem  canceled  and  void.”  A.  4-.00  p.m.  that  day,  Cohen  called  Davidson  and  they 

spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agi-eement”  appear  to  have  touched  off  a  flurry  of  communications  aboutthe  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: 

_ - ■■  ^.t_4.43„p_t3ay^Howard-senDCohen  .a 

they’re  going  with  DailyMail.  Ai-e  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howai-d’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  stoiy  of  an  exhamarital  affair  with  Trump  to  the  Daily  Mai , 

tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 

Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

hi.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  tlie  call  only  lasted  eight 

seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  ‘Well??? 

V.  At  6:44  p.m,,  Howard  responded  to  Cohen’s  text,  stating:  Not  taking  my 

oallc.”  Cohen  responded  one  minute  later:  “Yotfre  Iddding.  Who  are  you  trying  to  mach?” 
Howard  r^ponded  one  minute  later:  “The  ‘agenf”  Based  on  my  involvement  in  this 


29  Due  to  the  partially  covert  natoe  of  the  investigation  to 
documents  fi’om  the  Trump  Organization  or  Davidson, 
referenced  in  this  article. 


this  date,  the  USAO  has  not  requested 
and  thus  does  not  possess  the  email 
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investigation,  I  understandHoward’s  text  messages  to  meanthathe  attempted  to  contact  Davidson 

about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howai-d’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howai'd  and  they  spoke  for  neaify  fom-  minutes, 

c.  The  following  day,  on  October  18,  2016,  TheSmoJdngGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Tmmp  had  an  extramarital  affair  with  Clifford.  However,  the 
article  noted  that  Clifford  had  declined  to  comment. 

_  _ 0n-oi"about-October-2S,^2O16,  the._cQmnmnicationsAetwggT_pQhen,  D 

Howai-d  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford. 

Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  theCohenEmail 

Wairants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  2$,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  callingyou  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  callmgyou  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  tunes  over  the  next  half 
hour  but  appeal-  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 

minutes.  At  7:11  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  thi-ee  minutes.  At  8:34  a.m.,  Cohen  caUed  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9 : 04  a.m. — less  than  thii-ty  minutes  after  speaking  with  Trump 
Cohen  sent  two  emaUs  to  tlie  peraon  who  had  incoiporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “ean  you  send  me  asap  tlie  filing  receipf  ’  and  then,  in  the  second 
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email,  “for  Essential  Consultants  LLC Thatperson  responded  with  the  filing  receipttwo  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  First  Republic  Employee-2  and  told  him,  in  sum 
and  substance,  that  he  decided  not  to  open  an  account  in  the  name  of  “Resolution  Consultmg”  and 
instead  would  be  opening  a  real  estate  consulting  company  in  the  name  of ‘Essential  Consultants  ” 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Tmmp  Tower,  and  wanted  to  go  to  a  First 
RepubUc  branch  across  the  sfteet  to  open  the  account,  so  First  Republic  Employee-2  called  First 

Republic-Empleyee-^l^a-preferred-banlier^at_thalbranch,^ssist  Cohen.  At  11.00_a.m.,  Fks^ 

Republic  Employee-1  called  Cohen.  I  loiow  from  my  participation  in  an  interview  with  First 
Republic  Employee-1,  that  aiuund  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Towel— 
on  the  same  floor  as  the  Trump  Organization— and  went  thi'ough  account  opening  questions, 
including  loiow  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-yom- 
customer  questions  about  the  puipose  of  the  account-the  answers  to  which  Fkst  Republic 
Employee-1  entered  into  a  foim— Cohen  stated,  in  sum  and  substance,  that  he  was  openmg 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consultmg 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based,  on  my  review  of  records  obtained  fi'om  First  Republic,  it  appeal's  that  this  account  (the 
“Essential  Consultants  Account”)  was  created  at  a  time  between  1 1  ;00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Banlc. 

f  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
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EssentW  Consultants  Account  Following  the  transfer,  at  approximately  4:15  pan.  on  October  26, 
2016,  First  Republic  Employce-2's  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  fends  had  been  deposited  into  the  Essential  Consultants  Account 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important 
Cohen  called  Pecker  at  6:49  p'm.  and  connected  for  thhty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 

and  connecterfdr-abom-feir^-secondsv-At-7-: 

for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that  “He  said 
he-d  caU  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  Fll  get 
It  sorted.”  Approximately  an  hour  later,  at  8:23  p.m..  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  witir  the  subject  line  “Confirmation.”  Howard  stated,  “Thank  you  both 
for  chattirrg  with  me  earlier.  Confnming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  referned  via  overnight  or  same-day  FedEx  to  Michael.  -  Change  of  agreement 
to  reflectthe  correct  LLC,  -  Transfer  offends  on  Thmsday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  Alter  receiving  that  email,  at  approximately  827  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  ITl  caU.”  At  8:28  p.m..  Howard  caUed  Cohen  and  they  spoke  for  three 

minutes. 

38.  On  October  27, 2016,  Cohen  made  a  payment  to  Davidson  of  $130.000-withthe 
funds  intended  for  Cllflord-for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  SpecifreaUy.  based  on  my  review  of 
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toll  records,  bank  records,  and  information  obtained  pmsuant  to  the  iCloud  Wan-ant  and  Cohen 

Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  conOrm  that 

ate  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 

until  such  time  as  directed  for  release  by  me,  in  writing,  Addittonally,  please  ensure  that  all 

paperwork  contains  the  correct  name  of  Essendal  Consultants  LLC.  I  thank  you  in  advance  for 

youl-  assistance  and  look  foi-ward  to  heaidng  fiom  you  later.” 

- b;-At-approxiniately40-:01-a.m.,mccoidinglo..recori^  provided  by  Firs^Rep^^_ 

Bank,  Cohen  completed  paperwork  to  wire  $130,000  horn  the  Essential  Consultants  Account- 
which  had  been  fcnded  a  da,  prior  from  Cohen^s  home  equity  line  of  credit-Ao  the  attorney  client 
trust  account  at  City  National  Banlc  that  Davidson  had  specified  in  the  wirmg  inshuctions  he  sent 

to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

o.  At  10:02  a.m,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confnm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
pemonall,  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  does  will  nmne  the  correct  corporation,  (Essential  Consultants  LLC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx,  Only  after  you  r’ec.ive  FedEx 

will  I  disburse.  Fan?” 

d.  At  10:50,  a.m.,  First  Republic  Employee-1  sent  Cohen  an  email  confirming  tha 

payment  had  been  sent  and  providing  him  with  the  wue  number. 

39.  On  October  28.  2016.  and  the  days  that  followed,  Cohen  finalized  the  transaction 

with  Davidson.  Speclfrcally,  based  on  my  review  of  toll  records,  information  obtained  purmant 

to  the  iCloud  Warrant,  public  sources,  and  banlc  records,  1  loiow  the  following. 
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a.  On  October  28, 201 6,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Begimting  at  1:21  p.m..  Cohen  attempted  a  series  of  phone  eaUs  to  Davidson.  Pecker, 
and  Howari  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howrd. 

b.  Later  that  day,  at  approximately  7:01  p,m..  Davidson  slated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good."  Davidson  responded.  “1 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m..  “Keith  pavidson]  says 

we  are  good7'-eohen-then-responded-U--0&cto-Howai-d-andC!ExMEent”  to  Davidson^.  At  __ 

approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minules.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howatd  and  Davidson. 
Howard  said:  “You'll  have  paperwork  tomonow  says  KD.”  Davidson  said:  ‘  We  ate  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howaid  and  “Thanks 
Keith,  wm  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 

receive  a  paclcage. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  20 18, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson.”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  pennlson]”  in  exchange  for 
$  130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson's”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 
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LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in  the 
agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  fom  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  stai-  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

40.  On  November  4, 2016,  just  three  days  after  the  Clifford  transaction  was  completed 
and  just  four  days  before  the  presidential  election,  the  Wall  Sti^eet  Journal  published  an  article 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bmy  her  story.  McDougal,  lilce  Clifford,  had  been  represented  by  Davidson. 
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Based  on  my  review  of  toll  records,  information  obtained  pm-suant  to  die  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  somces,  it  appears  that  Cohen  spoke  fi-equentiy  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication— just  days  before  Election 
Day-aboutdie  importance  of  preventing  the  McDougal  and  Clifford  stories  dom  gaining  national 

traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  oommimioated  several  times 

with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m,  Cohen  sent  Howard 

a  texrmessage-with-a-sereenshot-of-an-emaiLtorwardeAtoJli^^  Tmmp  Organtatto^ 

lawyer.  The  forwarded  email  was  from  a  Wall  Sheet  Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  eampalEU  on  the  story.  Cohen  also  spoke  with  Hleks  several  times, 
inclnding  shortly  before  and/or  after  calls  with  Pecker,  Howm-d  and  Davidson.  Indeed,  at 
approximately  7:33  p.m,  nsingtwo  different  cellphones  snbseribed  to  him,  Cohen  appearstohave 

been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m,  Cohen  sent  Howard  a  message,  stating:  “She’s  heing 

really  difficult  with  giving  Keith  a  statement  Basically  went  into  hiding  and  unreachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m,  Howard  respondedto  Cohen’s  text:  “Let’s  letthe  dust  settle.  Wedon’t 

want  to  pushherover  the  edge.  She’son  side  at  present  and  we  haveasolidpositionandaplauslble 

position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
Investigation.  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  drey  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
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plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  pm-ported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m,  on  November  4,  2016,  Howai-d  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  I  think  it  11  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  i-efeiring  to  Trump  when  he  stated  he  s 
pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  cotAA 
publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment  fiom 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  neai-ly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appeai-s  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  appi'oxhnately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howai-d  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  stoi-y  came  across.  The  next 
morning  onNovember  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  So  far  I  see  only 
6  stories.  Getting  little  to  no  haction.”  Hicks  responded,  “Same.  Keep  praying!!  It’s  working!” 
Cohen  vwote  bade,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
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statemeat  by  Stom  deaying  eveiything  and  conti-adicttogthe  other  pom  alars  statement,  I  wouldn’t 
use  It  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  oatesl”  Based  on  my 
involvement  in  this  investigation.  I  believe  Cohen  was  tefeming  to  dte  above-refetenced  traded 
audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a  statement 

couldbeusedtomfluencepotentialnegativemediarelatingto  Trump,  butwas  unnecessary  at« 


time.  Based  on  a  text  message  from  Hicks  to 
spoke  to  Trump. 


Cohen,  I  believe  that  later  that  morning,  Pecker 


th^electionJor-President  of  the  Med_ 


41.  OnorahoutKovember8,2G16,Trampwon 

States 

42.  On  or  about  January  12.  2018.  the  Wall  Straet  Jowml  fust  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22.  2018.  Common  Cause,  a  govemnlent 

wa«hdoggroup,f.ledacomplaintwithd>eTederalElectlonCo.r,mlssion.al.egi 

violamd  cmnpaign  Tmance  laws  by  making  the  payment  to  Clifford.  Based  on  my  review  publrc 
sources  Mowing  fta,  report,  as  well  as  emails  obmined  pursuant  hr  the  Cohen  Email  Warrant.  I 

have  learned  the  following; 

a,  On  or  about  January  23,  2018.  the  day  after  Common  Cause  fried  its  complaint, 
Cohen  began  emailing  himself  drafts  of  statements  describmg  his  payment  to  Clifford. 
Additionally,  on  January  23.  2018.  Cohen  emailed  the  followhrg  draft  of  drat  smtement  to  an 
individual  who  appears  to  be  wilting  a  book  on  Cohen’s  behalf: 

special  counsel  and  piotectoi,  I  o  p  ^  b^t  I  am 

mean  that  it  doesn't  create  harm  and  damag  . 
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occur  I  negotiated  a  non-disclosure  agreement  with  Ms.  Cliffords 
counsel  and  tendered  the  funds.  I  did  this  thmugh  rny  Delawai-e  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  my  thnd  party  oi 
thJpresidential  campaign.  At  no  point  did  I  ever  advise  Mi.  Tjump  of  my 
communications  or  actions  regaining  this  agreement  As  “^tlan^^^ 
unusual  as  this  may  appeal',  the  Trumps  have  been  like  fam  y 
over  a  decade.  It’s  what  you  do  for  family. 


(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
■  is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  (“...fc  2011 
story. but  that  Cohen  was  motivated  to  “keep  the  story  fl'om  breakmg"  again  m  October  2016. 

b.  On  or  about  February  13, 2018,  Cohen  said  in  a  statement  to  ne  New  York  Times 


that  “Neither  the  Trump  Organization  not  the  Trump  campaign  was  a  palty  to  the  transaction  with 
Ms.  Cliffoni.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  deelined  to  answer  follow-up  questions  including 
.  whetha-  Trump  had  been  awar-e  of  the  payment,  why  Cohen  made  the  payment,  or  whelhel  similar 


payments  had  been  made  to  other  people. 

c.  On  or  about  February  14, 2018,  Cohen  was  aslced  by  2!ieJV<!ii<  Tork  nmea  whether 

Trump  had  relmbmsed  him.  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  ‘Tn  a  private  transaetion  in  2016, 1  used  my  own  personal  funds  to  faeiUtate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaetion  with  Ms.  Clifford,  and  neither  relmbmsed  me  for  the  payment,  either 


directly  or  indii'ectly.” 

43.  On  or  about  March  9,  2018,  Cohen  stated  to  MC  News  that  “the  funds  were  taken 
ftom  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.” 
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44.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that 
Cohen  committed  violations  of  the  Campaign  Finance  Offenses  by  maldng  an  in-kind  contribution 
to  Trump  or  the  Tmmp  campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the 
election.  Indeed,  while  he  denies  having  given  an  unlawful  contiibution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $  130,000  of  his  “personal  fiands”  to  Clifford  and  thatthe  payment 
occuiTed  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
about  his  behavior  toward  women,  even  though  allegations  of  an  affair  between  Trump  and 

Glifferdexisted  since  20IT.--ln  addition,  Ae_conMruni^tlQnrgcm-ds.selfb  A 

that  Cohen  communicated  with  members  of  the  Trump  campaign  about  his  negotiation  with 
Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

C.  Probable  Cause  Justifying  Search  of  the  Subject  Premises  and  Subject  Devices 

45 .  Based  on  the  foregoing,  my  review  of  records  produced  pursuant  to  subpoenas  and 
Ae  Cohen  Email  Warrants,  and  the  iCloud  Warrant,  and  my  training  and  experience,  Aere  rs 
probable  cause  to  believe  that  the  Subject  Premises  and  Subject  Devices  have  been  used  rn 
furtherance  of  Ae  Subject  Offenses  and  are  likely  to  contain  instrumentalities,  evrdence,  andfrmts 
of  the  Subject  Offenses,  Specifically,  there  is  probable  cause  to  believe  that  Cohen  permanently 
resides  at  Subject  Premises-1  and,  at  least  in  part,  works  at  both  Subject  Premises-1  and  Subject 
Premises-2,  and  that  Aose  locations  contain  evidence  relating  to  the  Sterling  taxi  medallion 
hansaction,  Cohen’s  assets,  Cohen’s  consulting  work  for  Essential  Consultants  EEC,  and  As 
payment  to  Clifford.  Additionally,  there  is  probable  cause  to  believe  Aat  Subject  Premrses-3 
contams  evidence  of  Cohen’s  assets  and  his  payment  to  Clifford.  Finally,  there  is  probable  cause 
to  believe  that  Subject  Premises-4,  in  which  Cohen  is  temporarily  residmg,  contams  elechomc 
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devices,  includmg  Subject  Device-1  and  Subject  Dcvice-2.  which,  in  turn,  ecutaln  evidence  of  the 
Subject  Offenses,  such  as  evidence  relating  to  the  Sterling  taxi  medallion  transaction,  Cohen’s 
assets,  Cohen’s  consulting  work  for  Essential  Consultants  EEC,  and  his  payment  to  Clifford, 

46,  FirsEihei-eisprobablecausetobelievethatCohenlivesandoperateshisbusinesses, 

at  least  in  part,  at  Subject  Premises-1.  Specifically,  from  my  review  of  property  records,  I  know 
that  Michael  Cohen  and  Eaura  Cohen  own  (in  trust)  Subject  Premises-1.  From  my  review  of 
Cohen’s  tax  leturns,  I  know  he  lists  his  primary  residence  as  Subject  Piemises-1.  Additionally. 

frorndtryEevie^feinails  pfoduced-pursuant-to-the-Gohen-Email-Wairants,J-know  that  Coh 

routinely  refers  to  Subject  Premises- 1  as  his  home.  For  example,  on  or  about  September  28, 2017 
and  October  6,  2017,  Cohen  emailed  individuals  that  his  home  address  is  the  address  for  Subject 
Premises-1.  I  also  know  from  my  review  of  emails  that  Cohen  receives  package  delivery 
notifleatrons  that  list  Cohen’s  address  as  the  address  for  Subject  Premises-1.  Cohen  has  also 
provided  the  address  of  Subject  Pr  emises-1  as  the  address  for  Essential  Consultants  and  Michael 
D.  Cohen  &  Associates,  PC.  For  example,  the  certificates  of  Incorporation  and  account  opening 
documents  at  First  Republic  for  both  entities  list  their  addresses  as  the  address  for  Subject 
Premises-1.  See  supra  H  18(b),  18(d).  The  consulting  agreement  between  Essential  Consultants 
and  AT&T  also  indicated  the  address  for  Essential  Consultants  is  the  address  for  Subject  Premises- 

1.  See  supra  ^  19(c). 

47.  There  is  also  probable  cause  to  believe  that  Subject  Premises-1  is  IMtely  to  contain 
instrumentalities,  evidence,  and  fiuits  of  dre  Subject  Offenses.  Specifloally,  from  my  review  of 
emails  produeed  pursuant  to  subpoena  and  dre  Cohen  Email  Warrante  and  iCloud  Warrant,  as  well 

as  my  training  and  experience,  I  know  the  followmg: 
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a.  According  to  records  maintained  by  Sterling,  the  address  for  all  of  Cohen’s  taxi 
medallion  LLCs  is  the  address  for  Subject  Premises-1.  See  supra  |  16(c).  Additionally,  the 
medallion  loan  documents  indicate  that  any  mailings  related  to  the  loans  should  be  sent  to  Subject 
Premises-1.  See  id.  Based  on  my  training  and  experience,  as  well  as  my  review  of  public  sources, 

I  know  that  individuals  keep  records  of  properties  and  assets  in  which  they  have  ownership 
interests.  Accordingly,  I  submit  that  Subject  Premises-1  likely  contains  evidence  of  Cohen’s 
ownership  of  the  taxi  medallion  LLCs,  the  revenue  that  those  medallions  generate,  and  the 
transaction  with  Sterling  in  201 4  to  re-fmance  the  medallion  loans  that  were  then  with  Capital  One 

Banlc, 

b.  From  ixiy  review  of  records  niaintarned  by  Sterling,  I  also  know  that  Steiling 
addressed  documents  relating  to  thi^^^^^|;ransaction  and  Cohen’s  attempts  to  modify  the 
terms  of  the  medallion  loans  to  Subject  Premises-1.  For  instance.  Sterling  addi'essed  the 
transaction  term  sheet,  see  supra  ^  16(1),  and  its  demand  letter  and  notice  of  default,  see  supra  f 
16(q),  to  Subject  Premises-1.  Accordingly,  Subject  Premises-1  likely  contains  evidence 
concerning  the  ^^^^|transaction  and  Cohen’s  negotiations  with  Sterling.  Some  of  those 
records — ^such  as  records  relating  to  a  payment  from  Cohen  to  ^^^^^^^ivere  concealed  from 
Sterling  and  cannot  be  obtained  via  subpoena  to  Sterling.  Additionally,  even  where  documents 
were  sent  to  Cohen  by  Sterling  (and  therefore  are  available  from  Sterling  via  subpoena),  the  fact 
that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to  Cohen’s  possession  or  Imowledge 
of  the  docxraients. 

c.  From  my  review  of  records  maintained  by  Fkst  Republic,  1  know  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  addresses  for  the  Essential  Consultants 
Account  and  MDC&A  Account.  See  supra  1 8(b),  18(e).  Accordingly,  it  is  lilcely  that  Subject 
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P*-l  contains  records  relating  to  the  Essentiai  Consuitants  Account  and  MDC&A  Account, 
includurg.  anrong  otherthings.  account  opentag  doc^ents,  baric  statenaents.  docunrents  provided 
as  part  of  the  Icnow-your-customer  process,  any  notes  made  by  Cohen  when  he  was  opening  the 
accounts,  wire  hansfer  records,  and  canceled  checks.  Even  where  these  records  can  be  obtained 
from  hirst  Republic,  the  fact  that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to, 
among  other  things,  Cohen’s  ownership  of  the  accounts,  or  his  knowledge  of  transactions  or  the 

existence  of  funds  in  accounts. 

- arTaaohmyWerwofrecordsmato^ 

Stanley,  City  Natlomrl  Baric,  Signature  Baric,  and  Bethpage  Credit  Union,  1  know  that  Cohen 
provided  the  address  for  Subject  Premises-l  as  die  mailhrg  for  his  accounts  at  each  of  drese 
fimmcial  institutions.  Accordingly,  it  is  likeiy  that  Subject  Pr  emises-1  contains  records  relating  to 
these  accounts,  inciuding,  among  other  things,  baric  statemeris  that  list  account  balances.  The 
existence  of  these  records  in  Subject  Premises-1  will  be  relevant  to,  among  other  things,  Cohen’s 
ownership  of  the  accounts  and  his  knowledge  of  the  balances  in  these  accounts. 

e.  Additionally,  Cohen  may  have  records  of  other  bank  accounts  or  assets  that  were 

not  disclosed  to  Sterling  and  are  not  presently  Icnowo  by  law  enforcement.  For-  example,  as 
described  above.  Cohen  has  received  interest  mcome  since  2015  that  he  has  not  disclosed  to 
Sterling  or  paid  taxes  on.  Also,  on  Cohen’s  August  2014  Financial  Statement,  see  supra  1 16(e). 
he  disclosed  $10,000,000  in  “investments  in  overseas  entrtres.  ’  The  value  of  these  mves 
was  omitted  from  subsequent  financial  statements.  However,  for  the  reasons  outlined  above,  there 
is  probable  cause  to  believe  that  Cohen  omitted  the  value  of  those  investments  from  his  2017 

Lt"ncr: 
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f,„a„oial  statements  in  otdet  to  nndetstate  his  assets.  As  Subject  Ptemises-1  is  Cohen’s  primary 

residence  andheusesSubjeetPremisesri  as  the  maillngaddressforbanlttecoris, there  is 

cause  to  believe  tlrat  account  statements  for  unlcnotvn  bank  accoums  or  assets  concealed  tom 

Sterling  are  lilcely  to  be  found  in  Subject  Premises- 1 . 

f.  Based  on  my  review  of  records  maintained  by  AT&T  and  produced  pursuant  to  the 

CohenEmailWatrants.Ilmowthatthe  address  CohenprovidedtoAT&TforEssentialConsult^^ 

is  the  addtess  for  Subject  Premises- 1.  See  .upra  1  19(c).  Therefore,  there  is  probable  cause  to 
believe  that  SnbjicrPBiasebcl-Trill  contatn  evrdenee-conoetnrng-^*^  pf  JEssetitra2_ 

Consultant  or  money  that  Cohen  received,  through  Essential  Consultants,  tom  AT&T. 
Additionally,  because  Cohen  used  the  address  for  Subject  Premlses-l  for  at  least  one  consulting 
arrangement  involvmg  Essential  Consultants,  tee  is  probable  carte  to  believe  te  Subject 
P.emises-1  may  contain  records  of  other  consulting  arrangements  that  Cohen,  through  Essmttial 

Consultants,  has  with  other  individuals  or  entities. 

g.  Bas«l  on  my  review  of  records  maintained  by  OetzePs  accounting  fnm.  and  emails 

produced  pursuant  to  the  Cohen  Email  Warrants.  1  have  learned  that  GetzePs  accounting  firm  sent 

documents  to  Subject  Premises-i  and  used  the  address  for  Subject  Premlses-l  as  the  address  Usted 

on  Cohen’s  personal  and  corporate  tax  reterns.  Sac  supra  1  16(n).  For  instance,  on  or  about 

October  6.  2017.  an  employee  at  Oetzel’s  accountmg  firm  emaded  Cohen  that  she  h 

Cohen’s  September  2017  Financial  Statement  by  FedErc  to  Cohen’s  attention.  Accordingly. 

Cohen’s  tax  records  are  likely  to  be  found  in  Subject  Prenrlses-1. 

h.  Basedonmyreviewofbanlt,ecordsandpublicly-availabledocurnents,Iltnowthat 

Cohen  used  $130,000  tom  a  home  equity  line  of  credit  on  Subject  Premises-1  to  pay  Clifford.  I 

also  knowthatondre  settlement  andnondisclosurea^eementbetween-PeggyPeterson”^ 
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LLC,”  the  address  for  Essential  Consultants  is  Subject  Premises-1.  Accordingly,  Subject 
Premises-1  is  lilcely  to  contain  evidence  of  tlie  Campaign  Finance  Offenses,  including  settlement 
and  nondisclosm-e  agreements,  payment  records,  written  and  email  correspondence,  and  records 

pertaining  to  the  home  equity  line  of  credit. 

i.  Based  on  my  review  of  emails  produced  pmsuant  to  the  Cohen  Email  Warrants  and 

iCloud  Warrant,  I  know  that  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mim,  and  a 
MacBook  Pro  to  access  his  iCloud  account.  Based  on  my  review  of  location  records  provided  by 

-Apple  pursuant-to-the-iCloud-WarranVFlmowjthat_ei_ectr^^^^^  devices  linlced  to  C^’s  iCloud 

account  were  used  at  Subject  Premises-1  to,  among  other  things,  place  telephone  calls  and  backup 
files  to  Cohen’s  iCloud  account.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  contains  electronic  devices,  including  certain  Apple  products,  that  for  reasons 

discussed  below  are  lilcely  to  contain  evidence  of  the  Subject  Offenses. 

j.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I 

understand  that  Subject  Premises-1  recently  sustained  water  damage  to  certain  parts  of  the 
premises,  and  that  Cohen  has  engaged  contractors  to  perform  certain  remediation  work  on  the 
premises.  In  addition,  as  set  forth  above,  I  believe  that  Cohen  and  his  family  are  temporarily 
residing  at  Subject  Premises-4  in  the  Loew’s  Regency  Hotel,  which  is  approximately. two  blocks 
fi-om  Subject  Premises-1.  However,  based  on  my  review  of  a  work  order  sent  to  Cohen’s  email 
by  a  contactor,  I  understand  that  the  first  phase  ofthe  work  order  calledforthe  conhactorto  ‘Tack 
&  Remove  all  items  &  funiishmgs  in  Living  Room,  Kitchen,  Sons  Room  &  Dining  Room  and 
store  them  ofif-site.  In  addition,  based  on  my  review  of  drawings  sent  to  Cohen  by  the  contractor, 
it  appeai-s  that  tire  work  is  primarily  being  done  in  these  rooms.  Thus,  I  believe  tlrat  the 
consti-uction-to  the  extent  it  is  still  ongoing  -  would  not  necessarily  have  caused  Cohen  to  move 
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all  documents  or  evidence  responsive  to  the  warrant  out  of  Subject  Premises-1,  because  it  does  not 
appeal-  that  work  is  being  done  to  the  portion  of  Subject  Premises-1,  such  as  a  home  office  or 
Cohen’s  own  room,  where  such  documents  or  evidence  would  most  likely  be  found. 

48.  Second,  there  is  probable  cause  to  believe  that  Cohen  uses  Subject  Premises-2  as 
office  space,  and  also  that  Subject  Premises-2  contains  certain  electronic  devices.  Specifically, 
from  my  review  of  the  “strategic  alliance  agi-eement”  between  Squire  Patton  Boggs  and  Cohen, 
and  my  review  of  the  press  release  on  Squire  Patton  Boggs’s  website,  I  Icnow  that  Cohen  has  an 

effiGemt-Subject-Premises^.--&e.^t/ff^^^^^^^ 

Cohen’s  agreement  with  the  law  ffim,  he  has  “dedicated  and  segregated  office  space”  m  Squire 
Patton  Boggs’s  offices  on  the  23rd  floor  of  30  Rockefeller  Plaza,  and  that  the  space  is  “physically 
sepai-ate”  from  the  fnm’s  offices  and  has  “locked  doors  and  its  own  locked  file  cabinets.”  See 
supra  If  19(e).  Additionally,  I  Imow  that  under  the  terms  of  the  agreement,  Cohen  agreed  to 
“arrange  for  [his]  own  computer  sei-ver  system  that  is  not  connected  to  [Squire  Patton  Boggs  s] 
computer  network  system.”  I  Icnow  from  my  participation  in  an  intei-view  with  Getzel,  who  met 
Cohen  at  Subject  Premises-2  in  2017,  that  Subject  Premises-2  is  an  office  with  a  door,  it  appears 
to  be  used  only  by  Cohen,  and  it  contains,  among  other  things,  a  computer  and  paper  files. 
According  to  Getzel,  when  Getzel  saw  Cohen  at  Subject  Premises-2,  he  had  two  cellular 
telephones  in  Subject  Premises-2.  I  also  know  from  my  review  of  emails  produced  pursuant  to  the 
Cohen  Email  Warrants  that  Cohen  uses  the  address  for  Subject  Premises-2  m  the,  signature  block 


31  As  noted  below,  based  on  my  training  and  experience,  I  believe  that  individuals  who  ^avel  or 
stay  in  hotels  for  short-term  periods  commonly  bring  some  items  with  them,  such  as  portable 
Schnnk  dtices  or  sensitive  items,  meaning  that  Cohen  has  likely  hiken  -^^ence  Rom 
Subject  Premises-1  to  Subject  Preinises-4.  Nevertheless,  given  the  temporary  natoe  ^  C^n  s 
stay  at  Subject  Premises-4  and  the  scope  of  the  work  being  done  at  Subject  Premises- 1,1  beheve 
it  I  unlikely  that  Cohen  has  taken  all  evidence  that  would  be  subject  to  seizure  out  of  Subject 

Premises-1. 
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on  his  emails.  Based  on  my  review  of  notes  of  a  call  between  Cohen  and  Fkst  Republic  Employee- 
2  (which  notes  were  taken  by  another  Fkst  Republic  employee,  who  was  participating  m  the  call 
and  talcing  notes),  I  know  that,  on  or  about  November  15,  2017,  Cohen  told  First  Republic 
Employee-2  that  he  had  a  new  office  at  30  Rock.  Moreover,  I  Icnow  from  an  article  in  Vanity  Fair 
published  on  or  about  Febiuaiy  14, 2018,  that  Cohen  was  interviewed  by  the  magazine  m  Subject 
Premises-2  in  or  about  Februaiy  2018. 

49.  There  is  also  probable  cause  to  believe  that  Subject  Premises-2  is  lUcely  to  contam 
imUlHnenlalMes,evidence,-and  Mte Specificallljtom  my  revi^  of_ 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 

as  my  training  and  experience,  I  Icnow  the  following: 

a.  According  to  records  maintained  by  Sterling,  when  Cohen  was  emailing  with 
Sterling  Employee-3  in  201 8  about  a  modification  to  his  existing,  loan  from  Sterling,  Cohen  listed 
his  addi-ess  in  his  email  as  tire  address  for  Subject  Premises-2.  See  supra  If  16(t),  16(u). 
Accordingly,  Subject  Premises-2  lilcely  contains  evidence  concerning  Cohen’s  loan  modification 

negotiations  with  Sterling. 

b.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  WaiTants,  I 
Icnow  that  the  addi-ess  Cohen  provided  to  M  and  BTA  for  Essential  Consultants  is  die  address 
for  Subject  Premises-2.  supra  ^  19(a),  19(b).  Tlierefore,  there  is  probable  cause  to  believe 
that  Subject  Premises-2  will  contain  evidence  concerning  the  operation  of  Essential  Consultants 
or  money  that  Cohen  received,  thmugh  Essential  Consultants,  from  ICAI  and  BTA,  among  other 
entities  with  which  Cohen  had  a  consulting  aiTangement.  Additionally,  based  on  my  review  of 
emails  sent  in  201 8  that  were  obtained  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
continues  to  enter  into  consulting  aiTangements  thi-ough  Essential  Consultants,  and  agreements 
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..elating  to  those  attengements  indicate  that  Essential  Consultants  is  located  at  Subject  Ptemises- 
2:  Additionally,  because  Cohen  used  the  addtess  fot  Subject  P.emlses-2  fot  multiple  consulting 
armngements  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-2  may  contain  records  of  other  unknown  consulting  aiTangements  that  Cohen  has  with 

other  individuals  or  entities, 

c.  Based  on  my  review  of  records  maintained  by  GetzePs  accounting  firm,  and  e, nails 
produced  pursuant  to  the  Cohen  EmaU  Warrants,  as  well  as  my  participation  in  an  interview  with 
Getzil.  I  hive  iafiaWGetzefvisited-Subject-Piemises-2 

See  supra  1 20(a).  At  that  meeting,  Getel  discussed  with  Cohen  whether  Cohen  should  disclose 
Essential  Consultants  on  his  personal  financial  statement  to  banks.  According,  there  is  probable 
cause  to  believe  that  Subject  Premises-2  will  contain  evidence  relating  to  Cohen's  taxes,  or  notes 
of  his  convemation  with  Getzel.  Moreover,  the  fact  that  Cohen  used  Subject  Premises-2  for  a 

meetmgreganlinghispe..sonalfmaucialmatte.sprovidesprobablecausetobelievethatd^^^ 

and  information  regarding  his  finances  will  be  found  in  Subject  Premises-2. 

d.  Based  on  my  participation  in  an  interview  with  Getzel,  I  loiow  that  Cohen  maintams 

a  computer  in  Subject  Premises.2.  From  my  review  of  IP  data  produced  pursuant  to  a  subpoena 
and  pen  register  to  Google,  it  appears  that  Cohen  is  logging  into  his  Gmail  account  from  Subject 
Premlses-2.  Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-2  contains 
electronic  devices,  that  for  reasons  discussed  below  are  likely  to  contain  evldenee  of  the  Subject 

Offenses. 

e.  Based  upon  my  training  and  experience.  I  have  learned  that  individuals  who 
maintain  businet.es  typically  keep  records  relating  to  the  business-^uch  as  contracts  with  clients 
and  records  of  payments-nt  the  business'  ideriified  location.  I  am  not  aware  of  any  addresses 
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associated  with  Essential  Consultants  other  than  Subject  Premises-1  and  Subject  Piemises  2. 
Accordingly,  there  is  probable  cause  to  believe  that  Subject  Pren,ises-1  and  Subject  Premises-2 
will  contain  business  records  for  Essential  Consultants. 

50.  Third.thereisprobablecansetobclievethatSubjectPrcmises-3islikel,tocontain 

inshumentalities,  evidence,  and  ftults  of  the  Subject  Offenses.  In  particular: 

a.  Asnotedabove.CohenhastwobankaccountsatTDBank.  In  or  about  November 

2017.asCohen«asreeelvingsubstantialincom.fxon,consultingworlc-whlchhediduot  disclose 

light  of  the  aforementioned  evidence  that  Cohen  conceals  assets,  including  assets  at  TD  Bank, 
drere  is  pmbable  cause  to  believe  that  Subject  Premises-3  contains  financial  assets,  objects  of  value 
and/or  documents  relating  to  such  assets  or  objects  of  value  that  Cohen  likely  did  not  disclose  to 
Sterling.  Indeed,  based  on  my  training  and  experience.  I  am  awne  that  people  often  conceal 

valuableimn.insafetydepositboxes.  Accordingly, dterelsprobabiecauseto believed 

Premises-3  will  contain  evidence  of  the  Bank  Fraud  Offenses. 

b.  in  addition,  based  on  my  review  of  records  poduced  by  TO  Bank,  I  know  that 
Cohen  has  accessed  the  vault  in  which  Subject  Premises-3  is  stored  on  two  occasions.  The  first 
suchoccasionwas  onNovember  10, 2017.  Cohen  signed  into  the  vault  at  approximately  5:35  and 
out  of  vault  at  appmximately  5:39  on  that  date.-  Based  on  my  review  of  toll  records.  I  know  that. 
Cohen’s  first  call  after  he  signed  out  of  the  safety  deposit  box-  approximately  45  minutes  later- 

wastoKelthDavidson.  Speclfrcally,at6:25p.m.  Cohen  calledDavidsonandthey  spoke  for  less 

to  a  minute:  three  minutes  later.  Davidson  caUed  Cohen  bade  and  they  spoke  for  approximately 


66 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  168  of  201 


22  minutes.  The  seeond  ^ch  oecasion  was  on  Febtuaty  2. 2018.  which  is  dufing  the  time  period 
nmttetous  media  reporis  about  Cohen-s  payment  to  Clifford  were  being  published,  and  is  one  day 
after  it  appears  that  Cohen’s  family  moved  into  Subject  Premises-4.  as  set  forth  above.  The  tlnung 

ofCohe„-stwovisi,stothevault-oneshortlybetore.c.lltoKel.hDavidson.nd«reoa.er.mund 

the  time  ttat  Cohen  came  under  media  scrudny  in  connection  whh  the  payment  to  Davidson’s 

client-gives  rise  to  probable  cause  to  beUeve  that  subject  Premises-Swillcontamevidenceofthe 

Campaign  Finance  Offenses,  such  as  documents  relevant  to  the  Cohen  s  dealmg 

Davidson  and  the  paymenfto  Cliffordrincluding-documents-orrevidencnflmt  Cohen  did  not  want  _ 

to  leave  in  his  apartment  where  construction  workers  would  be  present.” 

51.  Based  onmy  review  of  emails  obtained  pursuant  to  the  CohenEmail  Warrants  and 

cell  phone  loeationintonnation.lbelteve  tot  Cohen  is  tempormlly  residing  in  subject  Pre^^^^^ 

4.  .ee  fl  8(d).  There  is  also  probabie  cause  to  believe  that  Subject  Premkes4  contams 

instiumentaUties  and  evidence  of  the  Subject  Offenses,  including,  the  foUowing: 

a.  As  described  above,  it  appears  that  Cohen  moved  to  Subject  Premises^  on  or  about 

February  1,  2018.  at  which  time  numerous  media  reports  about  Cohen’s  involvement  in  to 
payment  to  Clifford  wem  being  published.  See  rrpru  11  3(d).  Durmg  this  time  same  period. 

Cohenwas to, uendycorrespondhrgwidrtomedia and senthimself  and otorssmternents  about 

his  hrvolvement  in  the  payment  to  Clifford.  See  rup,™  11 42(a>(e).  Thus,  there  Is  probable  cause 
tot  Cohen  took  at  least  some  do—  and  evidence  relathrg  to  to  Clifford  payment  wito  hrm 
m  subject  Premises-4.  in  order  to  reference  and  consult  them  in  connection  with  these  shrtements. 


approximately  five  tohes  by  ten  totos. 


33  As  noted  above,  Subject  Premises-3  is  approxima  e  ^  ^ ,  Jg.  however,  a  small  number 

portable  stomge  device,  would  fit  in  Subject  Premises-3, 
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b.  As  described  above,  at  the  time  Cohen  moved  to  Subject  Premises-4,  he  was  also 

in.hemidstofongoi„gnegotia.ionswithSteriingtega..dmgthetefmanci^^ 

For  example,  on  January  30, 20 1 8,  Cohen  had  a  lengthy  phone  call  with  Sterling  Employee-3  about 
his  fmanees  and  the  proposed  restructuring,  and  on  February  1.  2018,  Cohen  sent  an  enmll  to 
Sterling  Employee-3  claiming  that  he  did  not  have  more  thus  SI  .25  million  in  cash.  See  snpm  fl 
16(u).  Urns,  there  is  probable  cause  that  Cohen  took  at  least  some  documents  and  evidence  relating 

to  his  ongoingnegotiarions  with  Sterling  witblrim  to  SubiectPremises-4,in  order  to  refmence  and 

consult  them  in  connection 

c.  As  described  above.  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mint, 
and  a  MaeBook  Pro  te  acuess  his  iCloud  account,  and  these  electronic  devices  linked  to  Cohen’s 
iCloud  account  were  used  at  Subject  Premises-1  -  Cohens’  permanent  residence  -  to.  place 

telephonecallsa„dbackupf.lcstoCohen’siCl„udaccount.ScesnFrnfl47(i).AldroughCohen’s 

stay  at  Subject  Premises4  is  temporary,  based  on  my  training  and  experienee  I  know  that 
individuals  who  travel  or  stay  in  hotels  for  short-term  periods  commonly  bring  porteble  electronic 
devices  widr  them,  such  as  cellular  phones,  tablets,  or  laptops.  Aecordingly,  there  is  probable 
cause  to  believe  that  Subject  Premises-4,  where  Cohen  currently  appems  to  be  residing,  contains 
electronic  devices,  including  Subject  Device-l.  Subject  Devlce-2,  and/or  certain  Apple  products. 
4at  for  the  reasons  discussed  herein  are  Idtely  to  contain  evidence  of  the  Subject  Offenses. 

d.  Monxrver.  as  set  forth  above,  based  on  cellphone  location  information  1  know  that 
subject  Device-1  and  Subject  Device-2  wore  hr  the  vicinity  of  Subject  Premises-4  as  r^ently  as 
this  morning  (April  8.  2018).  As  set  forth  above,  there  is  probable  cause  to  beUeve  ftat  Cohen 
used  the  subject  Devices  in  furtherance  of  the  Subject  Offenses,  ure.uding  to  commrmicate  wld. 
Sterling  employees  regarding  the  mettellion  transaction,  with  First  Republic  employees  regarding 
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the  Essential  Consultants  Account,  with  his  accountant  regai-ding  his  finances,  and  with 
individuals,  such  as  Davidson,  Howard  and  Pecker,  involved  in  the  $130,000  paymentto  Clifford. 

52.  Although  Cohen  appears  to  be  residing  cuiTcntly  in  Subject  Premises-4,  it  is 
nnloiown  whether  Cohen  will  be  physically  present  within  Subject  Premises-4  at  the  moment  the 
warrantsoughtherein  are  executed.  If  Cohen  is  within  Subject  Premises-4  atthatmoment,  Subject 
Device-1  and  Subject  Device-2  -  his  cellphones  -  will  likely  also  be  within  Subject  Premises-4. 
If  Cohen  is  not  within  Subject  Premises-4  at  that  moment,  the  devices  will  likely  be  on  his  person, 

wherever  he  is  located  (which^based  on  location  data_for_SubjecLD_ewceHA^^ 

as  i-ecently  as  today,  is  likely  to  be  in  the  Southern  District  of  New  York).  As  such,  Ihis  warrant 
seelcs  sepai-ate  authority  to  seize  Subject  Device- 1  and  Subject  Device-2,  in  the  event  that  drose 
devices  ai-enot  located  within  Subject  Premises-4  (or  another  Subject  Premises)  atdre  moment  the 

warrants  sought  herein  are  executed. 

D.  Probable  Cause  Justifying  Search  of  ESI 

53.  Based  on  the  foregoing,  there  is  probable  cause  to  believe  that  Subject  Premises-1, 

Subject  Premises-2  and  Subject  Premises-4  contain  electronic  devices  that  are  likely  to  contam 
evidence,  fi-uits,  and  instiumentalities  of  the  Subject  Offenses  (and,  as  set  forth  above,  that  Subject 
Device- 1  and  Subject  Device-2  ai-e  themselves  electronic  devices  that  are  lilcely  to  contam 
evidence  of  the  Subject  Offenses).  Specifically,  based  on  my  review  of  information  produced 
pui-suant  to  the  Cohen  Email  Wairants,  the  iCloud  Wairant,  and  subpoenas,  as  well  as  pen  register 
data,  I  submit  that  there  is  probable  cause  that  Subject  Premises-1  contains  an  Apple  iPad  Mini,  a 
MacBook  Pro,  and  has,  at  various  times,  contained  Apple  cellphones;  similarly,  there  is  probable 
cause  that  Subject  Premises-2  contains  a  computer  and  has,  at  various  times,  contained  Apple 
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cellphones.  These  devices  are  likely  to  inctade  evidence,  flnta,  and  inshnmentalMes  of  the 

Subject  Offenses  for  the  following  reasons: 

a.  As  described  throughout  this  affidavit,  Cohen  used  email  to  send  and  leceive 

commmtlcatlons  related  to  the  Subject  Offenses.  In  particular,  Cohen  used  emaU  to  send  and 

receive  conununieattonswidtSterling,FirstRepublic.Oetzel,  the  entides  to 

consulting  services,  Davidson,  and  Howard,  among  others.  While  some  of  these  cmarls  have 
already  been  obtained  via  subpoenas  and  search  warrants,  I  know  fi-om  my  tiaining  and  exp 

-tharlndlvidualtrean-and-do^  °- 

those  emaas  on  then-  hard  drives.  I  also  Itnow  that  individuals  often  have  multiple  emaU  accounts, 
some  of  which  may  not  be  known  to  law  enforcement,  and  as  a  result  electronic  devices  can  be  a 
rmlqne  repository  of  all  emails  relevant  to  certain  Subject  Offenses.  Indeed,  from  my  involvement 
in  this  investigation.  I  know  that  Cohen  had  an  email  account  with  the  Trump  Organlxation,  but 
the  DSAO  and  FBI  have  not  been  able  to  obtain  the  contents  of  that  account  to  date.  Thus,  emails 
relevant  to  the  Subject  Offenses  are  lilcely  stored  on  electronic  devices  in  Subject  Premises-1. 

Subject  Premises-2  and/or  Subject  Premises-4. 

b.  Additionally,  SubjectPremises-1,  Subject  Premise-2  and  Subject  Pl-emises-4  likely 

eomain  elechonie  copies  of  documents  relevant  to  the  Subj  ect  Offenses.  Indeed,  I  know  from  my 

training  and  experience  that  individuals  often  retain  copies  of  important  documents  on  their 
eomputeia  or  other  electronic  devices  capable  of  storing  information,  including  cellphones  (such 
as  fte  Subject  Devices)  and  tablets.  Here,  there  are  a  number  of  documents  that  Cohen  has  likely 
retained  that  will  be  relevant  to  the  Subject  Offenses.  For  example,  elechenic  devices  may  include 
documentation  of  Cohen’s  true  net  worth,  a  listing  of  his  assets,  an  accounting  of  his  avaUable 
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cash,  consulting  agr^ments  with  tod  parties,  and  docunrentation  of  his  payment  to  Cliflord. 

among  other  evidence  of  the  Subject  Offenses. 

0.  Third,  I  know  fom  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email 

Wattunto  that  Cohen  sent  up  online  banking  with  First  Republic.  Based  on  my  training  and 

experience.  I  know  that  individuals  who  set  up  online  banking  often  mceive  electronic  notices 

concerning  financial  hansactlons  and,  on  occasion,  save  records  of  dtelr  financial  toansactlor.  to 

tlrelr  devices.  Accordingly,  there  is  probable  cause  to  believe  that  Cohen’s  electronic  devices 

did  not  disclose  to  Sterling  or  Melrose. 

d.  Fourth,  from  my  review  of  records  produced  by  Apple,  I  Imow  that  Cob 
communicates  using  text  message  as  well  as  encrypted  communications  applications.  These 
applications  that  Cohen  has  do«loaded  onto  a  phone  Include,  but  are  not  limitod  to,  WhatoApp, 
Signal,  and  Oust.  I  know  from  my  review  of  toll  records  and  text  messages  that,  in  particular. 
Cohen  communicated  with  Pecker  using  these  encrypted  appHcations.  Accordingly,  there  is 
probable  cause  to  believe  that  Cohen’s  cellphones  -  the  Subject  Devices  -  will  contain  encrypted 
.....ages  that  are  not  otheiwise  accessible  relating  to  the  Subject  Offenses. 

■  54,  Based  on  my  training  and  experience,  I  Imow  that  individuals  who  engage  in 
financial  crimes  commonly  use  computoix  to  communicate  with  co-consphatom,  keep  fhmncial 
ledgers,  and  retain  fraudulent  documents.  As  a  result,  they  often  store  data  on  their  computers 
related  to  their  illegal  activity,  which  can  include  logs  of  online  or  cellphone-based  -chato”  with 
co-conspirators;  email  correspondence;  contact  information  of  co-conspiratom.  including 
telephone  numbers,  email  addresses,  and  Identifiers  for  instant  messaging  and  social  medial 
accounts;  bank  account  numbers;  and/or  records  of  uses  of  funds. 
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55.  Based  on  my  training  and  experience,  I  also  Imow  that,  where  computers  are  used 
in  furtherance  of  criminal  activity,  evidence  of  the  criminal  activity  can  oflen  be  found  months  or 

even  years  after  it  occurred.  This  is  typicaiiy  true  because; 

.  ElecU-ooic  files  can  be  stored  on  a  hard  drive  for  years  at  little  ™  ™ 

tove  little  incentive  to  delete  data  that  may  be  useful  to  consult  m  the  fulur  . 

.  Even  when  a  user  does  choose  to  delete  data,  the  ^eTeS”  ™  Xme 

^m%r.  kinhlarl^  M 

piges.  Thim.  the  abUity  ^  liter’s 

•  In  the  event  that  a  user  changes  ^ 

a"  rrs "  rr-^such  as  drmnb  dfives,  fia. 
memoiy  cards,  CD-ROMs,  or  poitable  hard  drives. 

56.  Based  on  the  foregoing.  I  respectfully  submit  there  is  probable  cause  to  believe  that 
Cohen  engaged  in  the  Subject  Offenses,  and  that  evidence  of  «s  criminal  activity  is  Itoly  to  be 
found  in  fite  Subject  Premises,  on  computers  and  electronic  media  found  in  the  Subject  Premises, 
and  on  the  Subject  Devices.  In  particular,  there  is  probable  cause  to  believe  that  the  Subject 
Pmmises  mtd  Subject  Devices  will  contain  evidence,  fiuits,  and  insUumentalWes  ofviolattons  of 
fire  Subject  Offenses,  as  more  fully  described  in  Section  B  of  Attachments  A,  B.  C,  D.  E  and  F  to 

the  proposed  waiTants,  including  the  following: 

a.  Evidence  necessary  to  establish  tire  occupancy  or  ownership  of  the  Subject 

Premises,  including  without  limitation,  utility  and  telephone  bills,  mall  envelopes,  addressed 
correspondenee.  bank  statements,  identification  documents,  and  keys. 

b.  Evidence  relating  to  Sterling,  Melrose,  and/or  taxi  medallions. 
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c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Cohen  and/oi  entities 
associated  with  him  to  trmrfe,  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  t(| 


land/or  entities  associated  with  him. 


d.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modily  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

e.  Evidence  relating  to  Essential  Consultants.  LLC.  including  any  documente  that 
indicate  the  natme  and  purpose  of  payments  made  to  or  horn  Essentia,  Consultants  or  the  nahire 

work  done  by  Cohen  or  anyothltrindlviduals  in  conneetion^ithEs^^^  - 

t.  Evidence  of  income  to  Michael  D,  Cohen  &  Associates,  including  any  documents 
that  indicate  die  nature  and  puipose  of  payments  made  to  or  fi-om  Michael  D.  Olhen  &  Associates, 
or  evidence  ofthe  purpose  of  accounts  opened  te  toe  name  of  Michael  D.  Cohen  &  Associates. 

g.  Evidence  relating  to  Cohen’s  net  wolto,  available  cash  and  cash  equivalent, 
monthly  and  annual  income,  income  sources,  and  other  asset,  whetoer  held  personally  or  through 

entities,  including  tex  returns,  personal  financial  statements,  and  bank  records. 

h.  Evidence  relating  to  agreements,  lotei^n^or  financial  transactions  between 

Cohen  and^^^^Bixl  any  payments  by^^H  Cohen. 


_ lind  any  payments  b> 

i.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  MoDougal,  or  their 
agents  or  legal  representetives.  including  any  nondisclosure  agreement  and  related  document. 

and  any  communications  related  to  such  agreements. 

J.  Evidence  of  communications  involving  Michael  Cohen.  Donald  Trump  and/or 

agent  or  associates  of  toe  Trump  Campaign  about  Stephanie  Clifford  or  ICaren  McDougal.  or 
payments  to  Stephanie  Clifford  or  Kai-en  McDougal. 
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Ic.  Evidence  of  communications 
David  Pecker,  and/or  Dylan  Howard  about 


involving  Michael  Cohen,  American  Media,  Inc., 
Donald  Trump,  the  Trump  Campaign,  Stephanie 


Clifford,  and/or  Karen  McDougal. 

l.  Evidence  relating  to  Cohen's  role  in  the  Trump  Campaign,  and  coordination  or 

consultation  with  the  Trump  Campaign, 

m.  Evidenee  of  communications  with  Donald  Tramp  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  mlycooi  tape  and  other  potendal  sour^  of  negative 

pubUoity  involving  Truthp’Trclafionshlp-intheTunupTo-  - 

n.  Evidenee  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 

payment  to  Clifford  or  others  in  connection  with  the  election. 

o.  Evidence  relating  to  Cohen’s  loiowledge  of  the  eampaign  finance  laws,  campaign 

conhibution  reporting  requirements,  and  campaign  contribution  limits. 

p.  Communications  with  others,  including  Jeffrey  Geteel  and/or  other  accountants, 

relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  fmanees; 

q.  Communications,  records,  documents,  and  other  files  reflecting  false 

rcprcscntattons  to  a  financial  institution  related  to  the  intended  pmpos.  of  an  account  or  loan  at 


that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
fimmeial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  puipos.  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

r.  EvidencotCohen'sintentasitrelatestotheSubjectOffensesunderinvestigation. 


in.  Procedures  for  Searching  ESI 
A.  Execution  of  Warrant  for  ESI 

57.  Federal  Rule  of  Criminal  Proeedm'e  41(e)(2)CB)  provides 


for  and  seize  property  “may 


authorize  the  seizure  of  eleetronic  stoiage 
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copying  of  ole^-onicaUy  s^red  into.ma.ion  .  . .  to.  late,  review"  Co„s..en.  widr  Me  41.  dris 
application  requests  authorization  to  seize  any  computer  devices  and  storage  media  and  tiansport 

diemtoanappropriateiawenforcementtaciii^forreview.msistypicailynecess^ 

of  reasons: 

.  Pirsh  die  volume  of  data  on  " 

for  law  enforcement  personnel  to  review  in  its  emiieiy  a 

.  Second,  because  compute,  dam  is  particularly  -ntw 

— s;.:urrr=:^" 

.  Thud,  there  are  so  many  ^pes  of  compute,  hardwme  "" 
underlying  computer  data* 

.  Fourdr,  many  factors  can  complicate  "^VrpS* 

device,  including  the  mci  easing  y  co  conceal  data  on  the  computer,  which 

features  or  configurations  designe  o  p  ^  personnel  to  detect  and  resolve, 

often  take  considerable  time  and  resources  foi  forensic  peisonn 

58.  As  discussed  herein.  Squire  Patton  Boggs  is  a  flmctiouiug  law  fimi  that  conducts 

legltim^husincssumelatcdto  Cohen's  commission  ofthe  Subject  Offenses.  Subject  Premlses- 

2  is  an  office  locamd  inside  of  Squire  Pahon  Boggs's  New  York  office.  In  order  m  execute  die 
„t  h.  dre  most  reasonable  fashion,  law  enforcement  petsomre.  wiQ  a«.mpt  to  invesdgate  on 

diesceneofwhatcompurers  or  smragemedla,  if  any.mustbeseizedor  copied,  mrdwha, computers 

or  storage  media  need  no,  be  seized  or  copied.  Law  enforcement  personnel  will  speak  widr  Squire 
Pahon  Boggs  personnel  on  dte  scene  as  may  be  appropriate  to  detetmine  which  files  ami  elecdonic 
devices  wlddn  Subject  Premises-2  belong  to  or  were  used  by  Cohen.  While,  based  on  .he 
foregoing.  It  does  no.  appc„  drat  Cohen  shared  elecdonic  devices  or  a  server  widr  Squire  Padon 
Boggs,  where  apprepriate,  law  enforcement  personnel  will  copy  data,  radrer  than  physically  sc^ 
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C„„pu«s.  .0  reduce  dre  extent  of  any  disruption  of  S,uire  Patton  Boggs's  operations.  If.  after 
inspeettag  dte  sei^  ^ntp^erx  off-site.  i,  is  deterntdred  dtat  some  or  ali  of  dris  e,nipment  is  no 
longer  necessary  to  relieve  and  preserve  the  evidence,  the  Oovermnen.  will  return  it. 

59.  Additionally,  because  Cohen  is  an  attorney,  and  claims  h,  serve  as  a  personal 

aftomey  for  Trnmp.thereview  of  evidence  selxedfromtheSubjectPremises  and  SubjectD^ 

will  l^eonduetedpm-suantmestabiished  screening  procedures  to  ensure  dratthe  law  enforeement 

personnel  involved  in  the  investigadon,  including  attorneys  for  the  Government,  collect  evidence 
^a^nrSTreasonai^deBi^^ 

appropriate, drepro^ures  will  include  use  ofadesignated'‘fdterteam,''separ^ 

die  invesdgative  team,  in  order  to  review  potentially  privileged  communications  and  demrmrne 
which  communications  to  release  to  the  investigation  and  prosecution  team. 

B.  Accessing  ESI  on  the  Subject  Devices 

60.  As  described  above,  the  Subject  Devices  are  both  Apple  brand  devices, 

61.  I  know  from  my  dalnlng  and  experience,  as  well  as  iiom  information  found  in  ' 
publicly  available  mamrials  including  those  published  by  Apple,  that  some  models  of  Apple 
devices  such  as  iPhones  and  iPads  offer  dreir  users  the  ability  to  unlock  die  device  via  dte  use  of  a 
fingerprint  or  thumbprint  (collecdvely,  “fingerprint”)  in  lieu  of  a  numerrc  or  alphanumerro 

passeodeorpassword.Thisfeamre  is  calledTouchro.Ialsolmowdratthe  Apple  iPhoneXoff^ 

its  users  dre  ability  to  unlock  the  device  via  the  use  of  facial  recognition  (ttaough  infrared  and 
visible  lyrt  scans)  in  lieu  of  a  numeric  or  alph^umeric  passcode  or  password.  This  feahn-e  is 

called  Face  ID. 

62.  If  a  user  enables  Touch  ID  on  a  given  Apple  device,  he  or  she  can  register  up  to  5 
fingerprints  that  can  be  used  to  unlock  drat  device.  The  user  can  then  use  any  of  dre  registered 
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flagevp,in«tounlock*edevicebyp.essmgth.«leva„.fm8erW 

whiah  is  foand  in  .hennnnd  button  (often  rfen-ed  to  as  tbe  “honte”  button)  found  at  the  bottom 
eenter  of  the  tout  of  the  deviee.  If  a  user  enables  Face  ID  on  a  given  Apple  device,  he  or  she  can 
unlock  the  device  by  raising  the  iPhone  to  his  or  her  face,  or  tapping  the  screen.  In  my  tia 

andexperience.usem  of  Apple  devices  thatofferTouchIDorF.ee  ID  often  enable  it  because  itis 

considered  to  be  a  more  convenient  way  to  unloclc  the  deviee  ttr.  by  entering  a  numeric  or 

alphanumeric  p^scodeorpassword.  as  well  asamore  secure  waymp.o.ectthedevice.scontentt^ 

- 63.  Irrsome-^rgc-FSTToirclflDwFace-IB-cannot-be^^^^ 

has  either  security  feature  enabled,  and  a  passcode  or  password  must  be  used  Inste^l.  These 
clroumsmnees  include:  (!)  when  dre  deviee  has  jus.  been  mrned  on  or  restarmd;  (2)  when  more 
tan  48  hours  has  passed  since  the  last  time  the  device  was  unlocWl  (3)  when  ta  passcode  or 

password  has  not  been  entered  in  the  lastbdays.  and  thedevice  has  not  been  unlocked  viaTouch 

ro  in  ttre  l^t  8  hours  or  the  deviee  has  not  been  unlocked  via  Face  ID  in  the  last  4  hours:  (4)  dr. 

devicehasr.ceivedaremoteloekcommtmd;or(5)f.vennsuccessftlatmmptttounlo* 

via  Touch  ID  or  Face  ID  ai'e  made. 

64.  The  passcodes  or  passwords  that  would  unlock  the  Subject  Devices  are  not  known 
to  law  enfor^ment.  Thus,  it  wdl  likely  be  necessary  to  press  the  Angers  of  the  user  of  the  Subject 

Devicesmd.edevioes-Touch  ID  sensor,  or  hold  due  Subject  Devices  in  ftontoftheusefsfac.  to 

acdvattt  the  Face  ID  sensor,  in  an  attempt  to  unlock  dre  device  for  the  purpose  of  executing  dre 
search  authorized  by  dris  warrant  Attemptirrg  to  unlock  dre  relevant  Apple  devices  via  Touch 
,  with  dre  use  of  ta  fingerprints  of  ta  user,  or  via  Face  ID  by  holding  the  device  in  fiont  of  the 
user-s  face,  is  necessaty  because  the  government  may  not  odrerwise  be  able  to  access  the  data 

contained  ondrosedevicesfor  the  purpose  of  executmgthesearchauthorlzedby  dris 
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65  Based  on  these  facts  and  my  training  and  experience,  it  is  likely  that  Cohen  is  the 

us.,oftheSubje^Devices.andtas.ha.hisfrf.s-among*ose«areab.e^ 

.,eSubiec.DeviceaviaTouchroorMs(aceisaMeto^Ioc.c.heSubjectDevloeav«aceID. 

66  Although  I  do  not  know  which  of  a  given  user's  10  fingerprints  is  capable  of 

u„.ockingapa.fic„^device.basedon.,trahtingandenpcrienceIknowtha.iti3  — 

user  to  unlock  a  Touch  ID-enabled  Apple  device  via  the  fingerprints  on  thumbs  or  mdex  fing 
the  event  that  law  etrfomement  is  unable  to  unlock  the  Subject  Devices  as  described  above 

-^^fee-aiemp-.?^ 
entry  of  a  password  or  passcode  before  it  can  be  unlocked. 

67  I  also  know  from  my  training  and  experience,  and  my  review  of  publicly  aval 

nmteidalspublishedbyApplethatApplebranddevices.such.stheSubiectDcvices.have 

«  allows  a  user  to  erase  the  contents  of  die  device  remotely.  By  logging  into  the  Intrs^mt.  the 
user  or  any  other  individual  who  possesses  the  user's  account  Information  cmi  take  steps  to 

completelywipetheconten«of.hedevice.dierebydesUoyingevidenceofcrimlndconduchata^ 

Wi4  any  other  information  on  the  device.  The  oidy  means  to  prevent  dus  action  is  to  disable  the 

device's  abiU^  to  connect  to  the  Internet  immediately  upon  seizute.  which  r^uires  eldier  access 

to  the  device  itself  to  alter  the  settings,  or  the  use  of  specialized  equipment  that  is  not  con 

available  to  law  enforcement  agents  at  every  arrest. 

68  Due  to  the  foregoing.  I  request  that  the  Court  authorize  law  enforcement  to  press 

hiefingeix  (mcludingthumbs)  of  Cohento  the  TouehID  seizors  die  SubjeetDevices.  or 

subject  Devices  hi  fiont  of  Cohen's  face,  for  the  pu^ose  of  adempting  to  unlock  die  Subject 

Devices  viaTouchIDorTace  ID  in  orderto  search  the  contents  as  authorizedhydiis  warrant. 
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C.  Review  of  ESI 

69.  FoUowtog  seizure  of  any  computer  deeices  and  storage  media  and/or  ttie  creation 
of  forensic  image  copies,  law  enforcement  personnel  (including,  in  addiUon  to  law  cnforeement 
offreern  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the  shrhrs  of  the  investigation  and 
related  proceedings,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel 
assisting  the  government  in  this  investigation,  and  outside  technical  experts  under  government 
control)  wUI  review  the  ESI  contained  theteln  for  information  lesponsive  to  the  warrant. 

- =70— lireonducting-this-revieWrlaw-enfoteementpeiMmeLmay^^^ 

to  determine  which  fries  or  other  ESI  contain  evidence  or  fruits  of  the  Subject  Offenses.  Such 

techniques  may  includej  for  example. 

believed  to  contain  pertinent  files); 

^natoof  each  document  in  a  file  cabinet  m  detenume  rts  relevance); 

.  “scanning”  storage  areas  to  discover  and  possibly  recover  recently  deleted  data  or 
deliberately  hidden  files;  and 

■  'd^toSSeteSclrSdlp^^^^ 

the  investigation^'';  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
XlZ-Con  reding  how.  when,  and  by  whom  the  computer  was  used. 


’i  Keyword  searches  alone  are  typically  rnadequ^e  to  md  videos,  do 

keyword  searches  work  only  S'®*  data  thae  may  be  information  properly 

contain  the  keywords  being  searched. 
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71.  Law  enforcement  personnel  will  make  reasonable  efforts  to  resttict  their  search  to 
data  falling  within  the  categories  of  evidence  specified  in  the  warrant.  Depending  on  the 

circumstances,  however, law  enforcementpersonnelmay  need  to  conductacomplete  review  of  all 


die  ESI  from  seised  devices  or  stomge  media  to  evaluate  its  contents  and  to  locate  all  data 

responsive  to  the  warrant. 

D.  Return  of  ESI 

72.  If  the  Government  determines  that  the  electronic  devices  are  no  longer  necessary 
to  retrieve  and  preseive  the  data,  andWdSviddslhyrmsel^^^ 

Federal  Rule  of  Criminal  Procedure  41  (c),  the  Government  will  lehrm  these  hems,  upon  request. 
Computer  data  tat  is  encrypted  or  unreadable  will  not  be  returned  unless  law  enforcement 
personnel  have  detemnned  tat  the  data  is  not  (i)  an  instrumentality  of  the  offense,  (ii)  a  fruit  of 
the  criminal  acttvity,  (lii)  contraband,  (iv)  otherwise  unlawfully  possessed,  or  (v)  evidence  of  the 


Subject  Offenses. 
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IV.  Conclusion  and  Ancillary  Provisions 

73.  Based  on  die  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  speeifled  in  Attachments  A,  B,  C,  D,  E  and  F  to  this  affidavit  and  to  the 
Search  and  Seizure  Warrants. 

74.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 
Court  orders  olheiwise. 


Special  Agent 
FBI 


Sworn  to  before  me  on 
8th  day  of  April,  2018 

Icf  Py  _ 

HON.  HENRY  B.  PITMAN 

UNITED  STATES  MAGISIHATE  JUDGE 
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AO  93  (SONY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

•  for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  )  ^ 

or  identify  the  person  by  name  and  address)  )  Case  No. 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  ^ 

New  York,  New  York  1 0065,  and  any  closed 
containers/items  contained  therein,  See  Attachment  D  ^ 

_  ATSm  SETZIII^^ 


To:  ■  Any  authorized  law  enforcement  officer 


~~~“7Sn^li^onT3yXfe(i^  IW^oTcemefflOfffca-ouan-attomey  for  tlie  govei^^ 
ofthe  following  person  or  property  located  in  the  Southern  District  of  - New  York - 


fidentiiv  the  verson  or  describe  the  property  to  be  searched  and  give  its  location) ,  ,  i  a  •  /'i.  ^ 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  any  closed  containers/items 
contained  therein,  See  Attachment  D 


The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 

property  to  be  seized)": 


See  Attachment  D 


property. 


:  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 

d->A-lS  _ 


YOU  ARE  COMMA3SIDED  to  execute  this  waitant  on  or  before  ^ _ 

(not  to  exceed  14  days) 

gf  in  the  daytime  6:00  a.m.  to  1 0  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

estabhshed. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  properly  , 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  dm'ing  the  execution  of  the  Warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

Unon  its  retmn,  this  warrant  and  inventory  should  he  filed  under  seal  by  the  Clerk  of  the  Coirrt. - - 

- - - — - - ^ -  USMJlnitiah 


O  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 

searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifyiirg,  the  later  specific  date  of  _ _ 

Date  and  time  issued:  M  r%Cy - - 

^  V  /  Judge  s  signature 


City  and  state:  Now  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  ('Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 

Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventoiy  made  in  the  presence  of : 

Inventory  of  die  property  taken  and  name  of  any  person(s)  seized: 

■  ■  Certification  _ _ _ _ _ — - 

I  declare  under  penalty  of  peijury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Executing  officer's  signature 


Printed  name  and  tide 
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ATTACHMENT  D 

I,  Premises  to  be  Searched— Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-A’)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein; 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540  PMc  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  17th  floor  of  the  hotel. 


H— ItemsTo-Be-Seized 


A.  Evidence,  Emits,  and  Instrum  entalities  of  the  Sub  j  ect  Offenses 

The  items  to  be  seized  Rom  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  banlc  entries),'  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(banlc  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

'  a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 

medallions,  finm  January  1, 2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfem^nto^  in  taxi  medallions,  and  any  associated  debts  'or 
liabilities,  to  others,  including  tc^Ujmand/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  natore 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  iufbcatft  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 


Cohen  andl 


^uidgnc^jetojn^^^^ereements,  loans,  and/or  financial 
^^^^^^^^^^^^^^^^^and/or  entities  controlled 
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and  any  payments  by 

JL^  /LiyjX-^  L-VJ  LAJL*-/ 

h.  Evidence  relating  to  payments  to  Stephame  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agi'eements . 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trurnp  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Kai'en  McDougal,  or 
payments  to  Stephanie  Chfford  or  Karen  McDougal. 

Evidence  of  communications  between  Michael  Cohen  and  ./^ericm  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howai'd  about  Donald  Tramp,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal  _  _ _ _ _ 

Ic.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign, 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tramp’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Chfford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contrihution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  pmpose  of  an  accomit  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
fiTiflTip.ia1  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  he  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categoiies 
set  forth  in  Section  r[.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  ceUphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lien  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 


The  items  to  be  seized  fi:om  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media;,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  mfoitnation. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices~oiF^orage“media5“including^ny"“hardware-or“SOftware-manuals-oi— othejr-information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

- ^3-. - -Any-evideneeeoneerning-the-identities  or  locations  oTthose  persons -with  access-to,_ 

control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  tfaerem  for  information  responsive 
to  the  warrant. 

hr  conducting  this  review,  law  enforcement  personnel  may  use  various  technicjues  to  locate 
information  responsive  to  the  warrant,  including,  for  example; 

•  smveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  atthe  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
then'  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  searoli  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.A  and  n.B  of  this  Attachment,  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  mview  of  all  the  ESI  fi-oin  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
-address-potentiakprivileges, - ^ - = — = — - ^ ^ 
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rV.  Conclusion  and  Ancillary  Provisions 

73 .  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachments  A,  B,  C,  D,  E  andp  to  this  affidavit  and  to  the 
Search  and  Seizure  Warrants. 

74.  In  light  of  the  confidential  nature  of  tire  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 
Court  orders  otherwise. 


Special  Agent 


FBI 


Sworn  to  before  me  on 


8th  day  of  April,  2018  f /  h  ^ 


STAtES  htAGiISTR.4TE  lUDGE 
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United  States  District  Court 

for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628, 

New  York,  New  York  10065,  and  any  closed 
containers/items  contained  therein,  See  Attachment  A 

SEARCH  AND  SEIZURE  WARRANT 


Case  No 


1 8  MAG  2  96  8 


To:  Any  authorized  law  enforcement  officer 


An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location): 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630) 
(collectively,  “Room  1628”),  New  York,  New  York  10065,  and  any  closed  containers/items  contained  therein,  See 
Attachment  A 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized) : 


See  Attachment  A  V  ^ 

I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property.  ; 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  ^  ^  '  ;  ;  ; 

(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established.  .  :  ^ 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 


The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

□  Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court,  ,  _  ^ _ 

xUBMJ  Initials 


□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whdse  property,  will  be 
SQdXchQd  ox  SQIZqA  (check  the  appropriate  box)  Gfor  days  (not  to  exceed 30),  '  V 

□until,  the  facts  justifying,  the  later  specific  date  ipf  ;  : 


Date  and  time  issued:  /  ( 

City  and  state;  New  York.  NY 


z. 


Judge  *Vsigndtur^ 

Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 


Printed  name  and  title 
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AO  93  (Rev,  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 

I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ _ 

Executing  officer  *s  signature 


Printed  name  and  title 
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ATTACHMENT  A 

I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630)  (collectively,  “Room 
1628”),  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New  York 
10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject  Premises- 
4  is  located  on  the  16th  floor  of  the  hotel. 

n.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfe^n^ntere^  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to^^^^^^^^^and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  ^d  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
20 13  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  and/or  by 
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and  any  by 

1,  2012  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
T)avidJPecker,^and/DJLDylan„Ho_ward  _about_D_onaldJrrump,.The_  Trump—Campaign,  Stephanio. 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
pa)nnent  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


Ito  Cohen,  from  January 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  n.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3.  Any  evidence  concerning  the.identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
persoimel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
11.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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AO  93  (SONY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  ^  Case  No. 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628,  ^ 

New  York,  New  York  10065,  and  any  closed 
containers/items  contained  therein,  See  Attachment  A  ^ 

SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)'. 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630) 
(collectively,  “Room  1628”),  New  York,  New  York  10065,  and  any  closed  containers/items  contained  therein,  See 
Attachment  A 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  A 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 


property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  1 L- 1 


(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

□  Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 

of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Gfor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 


Date  and  time  issued:  (“S  "7  t  §  j 

1  ^ 

1  ' 

1 

1  Judge 's  signature 

City  and  state :  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ 

Executing  officer  *s  signature 


Printed  name  and  title 
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ATTACHMENT  A 

I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein; 

Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630)  (collectively,  “Room 
1628”),  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New  York 
10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject  Premises- 
4  is  located  on  the  16th  floor  of  the  hotel. 

II.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfei^n^ntere^in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to^^^^^^^^^|md/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  timsaction^etween 
Cohen  and  ^^^^^^^^^^^^^^^^^^^and/or 
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1,  2012  to  the  present. 


and  any  payments  by 


to  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 


j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 


m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 


o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3.  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
persormel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 


Maintained  at 
Premises  Controlled  by  Google,  Inc., 
the  Email  Account 

Maintained  at  Premises  Controlled  by 
Oath,  Inc.,  and  the  Email  Account 
maintained  at 

Premises  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
2018R00127 


TO  BE  FILED  UNDER  SEAL 
AGENT  AFFIDAVIT 


Agent  Affidavit  in  Support  of  Application  for  a  Search  Warrant 
for  Stored  Electronic  Communications 


STATE  OF  NEW  YORK 
COUNTY  OF  NEW  YORK 


) 

)  ss. 
) 


Special  Agent! 


the  United  States  Attorney’s  Office  for  the  Southern 
District  of  New  York,  being  duly  sworn,  deposes  and  states: 

L  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern  District 
of  New  York  (the  “USAO”).  I  have  been  a  Special  Agent  with  the  USAO  since  August  2016.  I 
previously  served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector 
General  from  May  2011  to  August  2016.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
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of  financial  crimes,  including  frauds  on  financial  institutions.  I  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  search  of  email  accoimts. 

B.  The  Provider,  the  Subject  Account  and  the  Subject  Offenses 

2.  I  make  this  affidavit  in  support  of  an  application  for  a  search  warrant  pirrsuant  to  18 
U.S.C.  §  2703  for  all  content  and  other  information  associated  with  the  email  accounts 


@gmail.com  (the  “Cohen  Account”), 


l^gmail.com  (the  “| 
Account”),  and 
“Subject  Accounts”).  The  Cohen  Account, 


Account”), 
l@aol.com  (the 


(the  “MDCPC 
(the 

[Account”)  (collectively,  the 
[Account,  and 


Account  are  maintained  and  controlled  by  Google,  Inc.,  headquartered  at  1600  Amphitheatre 
Parkway,  Mountain  View,  California  94043  (“Google”),  the  MDCPC  Account  is  maintained  and 
controlled  by  1  &  T  Internet,  Inc.,  headquartered  at  701  Lee  Road,  Suite  300,  Chesterbrook, 
Permsylvania  19087  (“1  &  1”),  and  th^^^jAccount  is  maintained  and  controlled  by  Oath,  Inc., 
22000  AOL  Way,  Dulles,  Virginia  20166  (“Oath”)  (together,  the  “Providers”).  The  information 
to  be  searched  is  described  in  the  following  paragraphs  and  in  Attachments  A,  B,  C  and  D  to  the 
proposed  warrants. 

3.  As  detailed  below,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  contain 
evidence,  fruits,  and  instrumentalities  of  violations  of  18  U.S.C.  §  371  (conspiracy  to  defraud  the 
United  States),  1005  (false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (banlc  fraud)  (collectively,  the  “Subject  Offenses”).  The  Target  Subjects  of 
this  investigation  are  MICHAEL  COHEN  (“Cohen”)  and  others  known  and  unknown.  This 
affidavit  is  based  upon  my  personal  laiowledge,  my  review  of  documents  produced  pursuant  to 
grand  jury  subpoenas  and  prior  search  warrants,  my  review  of  interview  reports  prepared  by  other 
law  enforcement  officers,  and  my  conversations  with  other  law  enforcement  officers,  as  well  as 
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my  training  and  experience  concerning  the  use  of  email  in  criminal  activity.  Because  this  affidavit 
is  being  submitted  for  the  limited  purpose  of  establishing  probable  cause,  it  does  not  include  all 
the  facts  I  have  learned  during  my  investigation.  Where  the  contents  of  documents  and  the  actions, 
statements,  and  conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in 
part,  except  where  otherwise  indicated. 

C.  Services  and  Records  of  the  Provider 

4.  I  have  learned  the  following  about  the  Providers; 

a.  The  Providers  offer  email  services  to  the  public.  In  particular,  Google  permits 

subscribers  to  maintain  email  accounts  under  the  domain  name  gmail.com.  Google  also  allows  a 
subscriber  to  maintain  email  accounts  under  any  domain  name  under  the  subscriber’s  control.  For 
example,  if  a  subscriber  controls  the  domain  name  ‘  Google  enables  the  subscriber 

to  host  any  email  address  under  this  domain  name  on  servers  operated  by  Google.  Oath  permits 
subscribers  to  maintain  email  accounts  under  the  domain  name  aol.com.  1  &  1  permits  subscribers 
to  maintain  email  accounts  under  any  domain  name  under  the  subscriber’s  control.  For  example, 
if  a  subscriber  controls  the  domain  nam(^^^^^^^’  1  &  1  enables  the  subscriber  to  host  any 
email  address  under  this  domain  name  on  servers  operated  by  1  &  1.  A  subscriber  using  the 
Providers’  services  can  access  his  or  her  email  account  from  any  computer  coimected  to  the 
Intemet. 

b.  The  Providers  maintain  the  following  records  and  information  with  respect  to  every 
subscriber  account: 

i.  Email  contents.  In  general,  any  email  (which  can  include  attachments  such 
as  documents,  images,  and  videos)  sent  to  or  from  a  subscriber’s  account,  or  stored  in  draft  form 
in  the  account,  is  rhaintained  on  the  Providers’  servers  unless  and  until  the  subscriber  deletes  the 
email.  If  the  subscriber  does  not  delete  the  email,  it  can  remain  on  the  Providers’  computers 
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indefinitely.  Even  if  the  subscriber  deletes  the  email,  it  may  continue  to  be  available  on  the 
Provider’s  servers  for  a  certain  period  of  time. 

ii.  Address  hook.  The  Providers  also  allow  subscribers  to  maintain  the 
equivalent  of  an  address  book,  comprising  email  addresses  and  other  contact  information  of  other 
email  users. 

iii.  Subscriber  and  billing  information.  The  Providers  collect  and  maintain 
(typically  unverified)  identifying  information  about  each  subscriber,  includmg,  for  example,  name, 
username,  address,  telephone  number,  and  alternate  email  addresses.  The  Providers  also  maintain 
records  concerning  the  date  on  which  the  account  was  created,  the  Internet  protocol  (“IP”)  address 
of  the  user  at  the  time  of  account  creation,  the  current  status  of  the  account  {e.g.,  active  or  closed), 
the  length  of  service,  and  the  types  of  services  utilized  by  the  subscriber.  Additionally,  for  paying 
subscribers,  the  Providers  maintain  records  of  the  subscriber’s  means  and  source  of  payment, 
including  any  credit  card  or  bank  account  number. 

iv.  Transactional  information.  The  Providers  also  typically  retain  certain 
transactional  information  about  the  use  of  each  account  on  its  system.  This  information  cm  include 
records  of  login  (/.e.,  session)  times  and  durations  and  the  methods  used  to  cormect  to  the  account 
(such  as  logging  into  the  account  through  the  Providers’  website). 

V.  Customer  correspondence.  The  Providers  also  typically  maintain  records 
of  any  customer  service  contacts  with  or  about  the  subscriber,  including  any  inquiries  or 
complaints  concerning  the  subscriber’s  account. 

vi.  Search  history.  Google  and  Oath  also  typically  maintain  records  of  any 
search  history  or  web  history  associated  with  the  subscriber’s  account. 
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vii.  Associated  content.  Google  also  typically  maintains  content  and  records 
relating  to  the  following  applications  that  are  associated  with  its  e-mail  accounts:  (A)  “Google 
Docs,”  which  provides  document-editing  software  that  can  be  used  to  create,  share,  store,  and 
manage  documents  online;  (B)  “Google  Drive,”  which  enables  users  to  store  fdes  on  Google 
servers,  where  they  can  be  accessed  remotely  by  the  user  and  others;  and  (C)  “Gchat”  or  “Instant 
Messenger,”  which  provides  a  chat  interface  through  which  users  can  communicate  with  each 
other  in  real  time.  Oath  also  typically  maintains  content  and  records  relating  to  AOL  instant 
message,  which  provides  a  chat  interface  through  which  users  can  communicate  with  each  other 
in  real  time. 

viii.  Preserved  and  backup  records.  The  Providers  also  maintain  preserved 
copies  of  the  foregoing  categories  of  records  with  respect  to  an  account,  for  at  least  90  days,  upon 
receiving  a  preservation  request  from  the  Government  pursuant  to  18  U.S.C.  §  2703(f).  The 
Providers  may  also  maintain  backup  copies  of  the  foregoing  categories  of  records  pursuant  to  its 
own  data  retention  policy. 

D.  Jurisdiction  and  Authority  to  Issue  Warrant 

5.  Pursuant  to  1 8  U.S.C.  §§  2703(a),  (b)(1)(A)  &  (c)(1)(A),  the  Government  may  require 
a  provider  of  an  electronic  communications  service  or  a  remote  computing  service,  such  as  the 
Providers,  to  disclose  all  stored  content  and  all  non-content  records  or  other  information  pertaining 
to  a  subscriber,  by  obtaining  a  warrant  issued  using  the  procedures  described  in  the  Federal  Rules 
of  Criminal  Procedure. 

6.  A  search  warrant  under  §  27 03  may  be  issued  by  “any  district  court  of  the  United  States 
(including  a  magistrate  judge  of  such  a  court)”  that  “has  jurisdiction  over  the  offense  being 
investigated.”  18  U.S.C.  §  271  l(3)(A)(i). 
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7.  When  the  Government  obtains  records  under  §  2703  pursuant  to  a  search  warrant,  the 
Government  is  not  required  to  notify  the  subscriber  of  the  existence  of  the  warrant.  18  U.S.C. 
§  2703(a),  (b)(1)(A),  (c)(2)  &  (3).  Additionally,  the  Government  may  obtain  an  order  precluding 
the  Provider  from  notifying  the  subscriber  or  any  other  person  of  the  warrant,  for  such  period  as 
the  Court  deems  appropriate,  where  there  is  reason  to  believe  that  such  notification  will  seriously 
jeopardize  an  investigation.  18  U.S.C.  §  2705(b). 

E.  Prior  Applications 

8.  On  or  about  July  1 8, 2017,  in  connection  with  an  investigation  being  conducted  by  the 
Oflice  of  the  Special  Counsel  (“SCO”),  the  Federal  Bureau  of  Investigation  (“FBI”)  sought  and 
obtained  from  the  Honorable  Beryl  A.  Howell,  Chief  United  States  District  Judge  for  the  District 
of  Columbia,  a  search  warrant  for  emails  in  the  Cohen  Account  sent  or  received  between  January 
1,  2016  and  July  18,  2017.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  from 
Judge  Howell  search  warrants  for  emails  in  the  Cohen  Account  sent  or  received  between  June  1, 
2015  and  November  13,  2017,  and  emails  in  the  MDCPC  Account  sent  or  received  between  the 
opening  of  the  account  and  November  13,  2017.  The  SCO  has  since  referred  certain  aspects  of 
their  investigation  into  Cohen  to  the  USAO,  which  is  worldng  with  the  FBI’s  New  York  Field 
Office.  As  part  of  that  referral,  the  SCO  provided  the  USAO  with  emails  and  other  content 
information  obtained  pursuant  to  the  search  warrants  executed  by  the  SCO,  which  had  already 
been  reviewed  for  privilege.  *  As  discussed  below,  this  affidavit  is  based  in  part  on  my  review  of 


^  In  an  abundance  of  caution,  in  a  separate  application  the  USAO  has  sought  authorization, 
pursuant  to  Fed.  R.  Crim.  P.  41,  to  review  the  emails  obtained  pursuant  to  the  Prior  Cohen  Account 
Warrants  for  evidence  related  to  certain  additional  conduct  that  was  not  the  focus  of  the  Prior 
Cohen  Account  Warrants.  The  emails  obtained  from  the  Prior  Cohen  Account  Warrants  that  relate 
to  that  additional  conduct  do  not  form  a  basis  for  the  instant  application. 
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responsive  materials  produced  pursuant  to  the  July  1 8  and  November  1 3 , 20 1 7  warrants  (the  “Prior 
Cohen  Accoxmt  Warrants”). 

9.  On  or  about  November  7,  2017,  and  January  4, 2018,  as  well  as  certain  prior  dates,  the 
SCO  sought  and  obtained  from  Judge  Howell  orders  authorizing  and  extending  the  installation  and 
use  of  pen  registers  and  trap  and  trace  devices  to  record  communications  sent  to  or  from  the  Cohen 
Account.  The  SCO  has  provided  pen  register  data  obtained  pursuant  to  those  orders  to  the  USAO. 
This  affidavit,  as  discussed  below,  is  based  in  part  on  my  review  of  the  pen  register  data  obtained 
pursuant  to  the  November  7, 2017  and  January  4,  2018  orders  (the  “Pen  Register  Data”). 

10.  On  or  about  February  16,  2018,  the  USAO  sought  and  obtained  from  the  Honorable 
Debra  Freeman,  United  States  Magistrate  Judge  for  the  Southern  District  of  New  York,  an  order 
pursuant  to  18  U.S.C.  §  2703(d)  for  email  header  information  associated  with  the  MDCPC 
Account.  This  affidavit,  as  discussed  below,  is  based  in  part  on  my  review  of  email  header 
information  produced  by  1  &  1  in  response  to  that  order  (the  “MDCPC  Header  Information”), 
n.  Probable  Cause 

A.  Overview 

1 1 .  The  United  States  Attorney  ’  s  Office  for  the  Southern  District  of  New  York  and  FBI  are 
investigating,  among  other  things,  a  scheme  by  Target  Subject  Michael  Cohen  to  defraud  multiple 
banks.  Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President 
Donald  Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump 
Organization,  an  international  conglomerate  with  real  estate  and  other  holdings. 

12.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations  in 
and  omitted  material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banks  in  connection  with  a  transaction  intended  to  relieve  Cohen  of 
approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
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in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  omitted  cash  assets  that  he  began  receiving  in  2017 
from  new  consulting  work;  (ii)  significantly  understated  his  total  holdings  of  cash  and  cash 
equivalents;  and  (iii)  failed  to  inform  the  banks  from  which  he  was  seeking  debt  relief  that  he  had 

in  connection  with 


agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party, 

acquisition  of  the  taxi  medallions  securing  Cohen’s  debt.  By  making  these 
misrepresentations  and  material  omissions,  Cohen  avoided  making  monthly  payments  on  his 
loans,  and  attempted  to  and  had  secured  proposed  agreements  from  the  banks  to  relieve  him  of 
certain  repayment  obligations  worth  millions  of  dollars. 

13.  Based  on  my  review  of  emails  obtained  from  the  Prior  Cohen  Account  Warrants, 
MDCPC  Header  Information,  and  documents  produced  pursuant  to  subpoenas,  I  have  learned  that 
Cohen  has  used  the  Cohen  Account  and/or  MDCPC  Account  to,  among  other  things,  (i) 


communicate  with 


and  their  attomeyj 


about  the  proposed  transfer  of  Cohen’s  medallions  and  associated  debts;  (ii)  negotiate  a  pay-down 
of  the  principal  amount  of  the  taxi  medallion  loans;  (iii)  communicate  with  his  accountant  about 
the  contents  of  the  false  financial  statements  at  issue;  and  (iv)  send  those  false  financial  statements 
to  banks.  Additionally,  the 

Account,  .^^^^^^^^^4ccount  and^^jAccoimt,  respectively,  to  communicate  with  Cohen 
about  the  status  of  the  taxi  medallion  transaction,  and  to  send  relevant  financial  statements  to 
banks.  Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that 
the  Subject  Accounts  will  include  evidence  of  the  Subject  Offenses. 

B.  Cohen’s  Statements  to  Sterling  National  Bank 

14.  As  set  forth  in  detail  below,  in  2014,  Cohen,  through  limited  liability  corporations 
(“LLCs”)  controlled  by  him  and  his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling 
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National  Bank  (“Sterling”)  and  the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions, 
for  approximately  $20  million.  Though  entered  into  by  LLCs,  the  loans  were  also  secured  by 
personal  guarantees  in  the  names  of  both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry 
weakened  and  the  medallions  were  devalued,  Cohen  sought  to  renegotiate  the  terms  of  those  loans 
and/or  relieve  himself  from  their  obligations,  including  the  personal  guarantees.  As  part  of  that 
effort,  Cohen  made  a  series  of  representations  to  Sterling  and  Melrose  about  his  net  worth,  assets, 
available  cash,  and  financial  outlook.  Specifically,  based  on  my  review  of  records  maintained  by 
Sterling  and  Melrose,  and  public  sources  concerning  the  taxi  industry  and  the  value  of  taxi 
medallions,  as  well  as  my  review  of  reports  prepared  by  law  enforcement  officers  of  interviews 
with  a  Sterling  executive  vice-president  (the  “Sterling  Employee-1”)  and  my  participation  in  an 
interview  with  a  Sterling  employee  (the  “Sterling  Employee-2”),  I  have  learned,  among  other 
things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  LLC  owns  two 
medallions).^  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  from  Capital  One  Bank,  for  which  the  medallions  served  as  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  party  made  monthly  payments  to 
Cohen,  who  in  turn  used  some  of  those  proceeds  to  pay  his  monthly  loan  payments. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 


^  One  of  these  companies.  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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the  prospect  of  refmancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One  Bank.  By  in 
or  about  September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would 
allow  Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  jfrom  the  then-increase  in 
value  of  the  medallions.  According  to  Sterling  Employee- 1,  in  2014,  prior  to  the  recent  upheaval 
in  the  taxi  industry — as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber — ^taxi 
medallion  loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  market  value 
of  taxi  medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans — like  the  loans  held 
by  Cohen — were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee- 1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 
and  used  the  additional  fimds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which — 
according  to  letters  from  Capital  One  Bank  in  Sterling’s  files — ^was  greater  than  his  previous  debt 
at  Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This 
allowed  Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8,  2014,  each  of  Cohen’s  sixteen  taxi  medallion  corporations  entered  into  loan 
agreements  and  promissory  notes  with  Sterling  for  the  principal  sum  of  $  1,375,000,  with  repayment 
due  on  December  8,  2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who 
was  the  sole  shareholder  of  the  corporation.  The  loans  were  also  each  secured  by  a  security 
agreement,  dated  the  same  day,  making  the  medallions  collateral  for  the  notes.  To  give  Sterling 
additional  security,  Michael  and  Laura  Cohen  signed  personal  guarantees  and  confessions  of 
judgment,  giving  Sterling  the  right  to  pursue  collection  against  the  Cohens’  personal  assets  were 
their  corporations  to  default  under  the  loan  agreements.  In  total.  Sterling  agreed  to  lend 

10 
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approximately  $22  million  to  the  Cohens’  companies.  Pursuant  to  participation  agreements, 
Sterling  transferred  45  percent  of  that  debt  to  Melrose.^  Under  the  terms  of  Sterling’s  participation 
agreements  with  Melrose,  Sterling  was  precluded  from  amending  or  modifying  the  loans  without 
the  consent  of  Melrose. 

d.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions,  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling’s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000."^  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  know  that  Sterling  viewed  the 
transaction  favorably  because,  accounting  for  loan  payments,  cash  flows  from  the  medallions  were 
projected  to  be  positive,  the  value  of  the  collateral  (as  estimated  by  Sterling)  exceeded  $42  million, 
and  the  net  worth  of  Cohen — ^who  was  the  direct  obligor  under  the  guarantee  agreements — was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

e.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  backing  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies  and  significant  devaluation  of  taxi  medallions.  Additionally, 
Cohen  began  falling  behind  on  loan  payments  to  Sterling  and  Melrose.  I  know  from  records 

maintained  by  Sterling  and  an  interview  with  Sterling  Employee-2  that,  begiiming  in  or  around 

^  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit  Union  Administration  (“NCUA”). 

^  Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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September  2015,  Cohen  told  Sterling,  in  sum  and  substance,  that  the  individual  leasing  Cohen’s 
medallions  had  fallen  behind  in  making  payments  to  Cohen,  and  that  as  a  result,  the  monthly  cash 
flow  from  his  taxi  medallions  had  been  reduced,  leaving  him  with  a  shortfall  of  approximately 
$16,000  each  month.  For  instance,  I  have  reviewed  an  email  from  Sterling  Employee-2,  dated 
September  9, 2015,  summarizing  a  call  with  Cohen — ^which  according  to  the  email  and  toll  records 
for  Cohen’s  cellphone  occurred  on  September  8,  2015 — during  which  Cohen  told  Sterling 
Employee-2,  in  sum  and  substance,  about  his  cash  flow  problems  and  a  monthly  shortfall  of 
approximately  $16,000.  In  that  same  email,  Sterling  Employee-2  commented  that  despite  Cohen’s 
statements,  his  personal  financial  information  “indicate[d]  a  strong  ability  to  make  up  the  difference 
in  payments.”  Cohen,  however,  according  to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction 
in  Cohen’s  monthly  payments. 

f.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
interview  with  Sterling  Employee-2,  I  have  learned  that  Cohen  and  Sterling  Employee-2  spoke 
again  on  September  28,  2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
know  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility — ^both  internally  and  with  Cohen — of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my  review 
of  loan  documents  and  records  maintained  by  Sterling,  I  know  that  in  or  about  November  2015,  as 
a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his  medallions  to 
cover  monthly  interest  payments.  Sterling  and  Melrose  agreed  to  amend  their  loans  with  Cohen  by. 
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among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extending  the  loan 
maturity  date  to  December  8, 2017. 

g.  I  know  from  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2,  as  well 

as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee- 1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  ^m||H|^|who  would  agree  to 
assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2  referenced 
above,  I  know  that  by  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
corporate  taxi  medallions  who  is  a  medallion  owner  and  taxi  operator,  for  the 

balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  the  transfer  of  the  medallion  loans — and  because  Sterling  was  unfamiliar  with^^| 

— Sterling  requested  that  Cohen  make  a  substantial  principal  pa5nnent  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  Jtuiuary  3 1 , 20 1 7,  Cohen  told  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with  Indeed,  in  an  email  sent  from  the  Cohen  Account  to  Sterling 

Employee-2  on  or  about  February  22, 2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million 
from  the  loan  amount.” 

h.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 

was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  to  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Melrose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
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Melrose  agree  to  the  terms.  On  or  about  May  2,  2017,  emailed  Sterling 

Employee-1  from  the  j^^^^^^^^Account  to  inquire  about  the  status  of  the  transaction. 
Sterling  Employee- 1  responded  to  at  the  Account  that 

Mehose  had  agreed  to  the  deal,  and  that  Sterling  would  be  sending  a  term  sheet 

shortly. 

i.  In  order  for  the  banks  to  evaluate  the  proposed  transaction  fully,  they  requested 
financial  information  from  the  parties.  On  or  about  October  26, 2016,  a  Sterling  employee  emailed 
the  .^^^^^^^Accoxmt  about  the  “Cohen  Medallion  Purchase,”  and  stated  “[i]n  order  to 
proceed  with  the  assumption  of  Michael’s  loans,”  Sterling  needed  certain  financial  information 

from^^^^^^^^^^^^^^^^^^^^^t'osponded  the^^^^^^^^^^Account, 

the  Account,  that  he  would  send  a  financial  statement  and  tax 

returns  shortly.  Additionally,  on  or  about  June  7,  2017,  Sterling  Employee-!  emailed  Cohen  to 
request  an  “updated  personal  financial  statement,”  completed  jointly  with  Cohen’s  wife,  and 
Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June  8,  2017,  Cohen  emailed  Sterling 
Employee- 1  from  the  Cohen  Account,  attaching  a  Sterling  personal  financial  statement  form  that 
had  been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1, 
2017  (the  “May  2017  Financial  Statement”),  that  was  also  attached.  The  May  2017  Financial 
Statement  included  a  cover  letter  from  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and 
substance,  that  the  information  in  the  statement  came  from  Cohen  and  that  Getzel  had  not 
confirmed  its  accuracy  or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had 
total  assets  of  $41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The 
May  2017  Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in 
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cash,  $26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $11,000,000  personal  residence. 

j.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee- 1, 1  have  learned  that  Sterling  Employee- 1  reviewed  each  line  of  the  May  2017  Financial 
Statement  with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee-1  asked 
Cohen  about  the  cash  amount  listed  on  the  May  2017  Financial  Statement.  Cohen  stated  to  Sterling 
Employee-1,  in  sum  and  substance,  that  the  May  2017  Financial  Statement  was  accurate. 

k.  On  or  about  August  16,  2017,  Sterling  Employee-1  emailed  Cohen  at  the  Cohen 

Account  and  the  j^^^J^^^^^Account,  a  term 

sheet  memorializing  the  potential  transaction  between  Sterling,  Melrose,  Cohen,  and 

On  or  about  August  29,  2017,  ^^^emailed  Sterling  Employee-1  from  the^^^^ 
Account,  requesting  that  he  be  included  on  “all  future  e-mails  to  and/or  .mil 

concerning  this  matter,”  and  providing  proposed  edits  to  the  term  sheet.  On  or  about 
August  30,  2017,  Sterling  Employee-1  emailed  the 

Account,  Cohen  at  the  Cohen  Account,  and  the  Account,  and  provided  them  with  a 

revised  term  sheet.  On  or  about  September  5,  2017,  Sterling  Employee-1  sent^^^^^^^^^| 
at  the  ^^^^^^^^^^|\ccount,  Cohen  at  the  Cohen  Account,  and-^^^rt  the  ^^^kccount  a 
copy  of  the  executed  term  sheet.  According  to  the  term  sheet,  would  borrow 

$20,000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that  ^^^^^|was  to 
acquire  from  Cohen. 

l.  As  part  of  the  agreement,  according  to  the  term  sheet,  $1,265,913  in  principal  (which 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banks,  with  Cohen  paying  fifty  percent  and  the  banks  dividing  the 
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remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandxun, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789  respectively  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance — despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars — ^because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee- 1,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  part  of  the  agreement,  Sterling 
and  Mehose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  H^^^^transaction,  Cohen  would  no  longer 
have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

m.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Melrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
required  and  requested  additional  financial  statements  for  Cohen  and  ||||||||H|m  for  its  credit 
xmderwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  October  5,  2017, 
sent  from  the  Account  to  a  Sterling  employee  a  copy  of 

personal  financial  statement.  The  financial  statement  lists 
Accoimt  as  the  email  contact  for^^^^^^^^.  Additionally,  on  or  about  October  5,  2017, 
Cohen,  using  the  Cohen  Account,  re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial 
Statement.  A  day  later,  on  October  6,  2017,  Cohen,  using  the  Cohen  Account,  emailed  Sterling 
Employee-2  a  statement  of  financial  condition,  dated  September  30,  2017  (the  “September  2017 
Financial  Statemenf ’). 
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n.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover  letter  from  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.  Notably, 
rmlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate  holdings),^ 
$3,200,000  in  real  estate  investments,  and  his  $11,000,000  personal  residence  (which,  for  the  first 
time,  he  indicated  was  held  in  trust).  The  September  2017  Financial  Statement  included  assets  and 
liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medalhons  and 
some' of  his  real  estate  investment  entities. 

o.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  at  or  around  the  time  Cohen  provided 
Sterling  with  these  financial  statements — in  or  around  September  2017^ — Cohen  stopped  paying 
monthly  loan  payments  on  his  taxi  medallion  loans  altogether.  According  to  Sterling  Employee- 
2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 

^Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thirty-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  whic^wa^considerably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-^^^^^|term  sheet. 
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September  2017  Finaneial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Cohen-’^^^^^|transaction  was  favorable  for  the  bank 
-  that  is,  that  j^^^^^would  be  a  better  borrower  than  Cohen. 

p.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  On  December  29,  2017,  Sterling  sent  Cohen  a 
letter  stating  that  he  was  in  default  under  the  loans  between  Sterling  and  Cohen’s  medallion 
corporations.  Cohen  did  not  make  an  immediate  payment  on  the  loans,  but  instead  sent  an  e-mail 
to  Sterling  Employee-1  on  or  about  January  24, 20 1 8,  from  the  Cohen  Account,  stating  that  during 
the  closing  of  the  Cohen-j^^^^^Jtransaction,  Cohen  would  “bring  all  payments  up  to  date  as 
well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  sent  from  the  Cohen 
Account  on  January  24,  2018,  that  at  the  closing  of  the  Cohen- 
provide  a  letter  stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal 
guarantees  of  the  medallion  loans  had  been  terminated. 

q.  The  Cohen- 


attomey,  emailed  attorneys  for  Sterling  from  the^^^|kccount 
and  stated  that  “at  this  time  there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have 
changed  and  we  are  not  prepared  to  go  forward.” 

r.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  know  that  after  the  Cohen-^^^^^^|deal  fell  apart. 
Sterling  assigned  Cohen’s  loans  to  an  employee  at  Sterling  who  specializes  in  collecting  on 
defaulting  loans  (“Sterling  Employee-3”).  From  my  review  of  telephone  call  notes,  I  know  that 
Sterling  Employee-3  spoke  to  Cohen  on  or  about  January  30,  2018  about  paying  down  and/or 


transaction,  however,  did  not  close.  On  or  about  January 


transaction.  Sterling 
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restructuring  Cohen’s  outstanding  taxi  medallion  loans.  Based  on  my  review  of  an  email  between 
Sterling  Employee-3  and  Cohen,  I  know  that  on  the  January  30,  2018  call,  Cohen  stated  that  he 
would  send  a  “corrected  current”  version  of  his  personal  financial  statement.  Following  that  call, 
on  or  about  January  31,  2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen  Account  a 
copy  of  the  September  2017  Financial  Statement.  Later  that  day,  Cohen  again  emailed  Sterling 
Employee-3  from  the  Cohen  Account  and  proposed  paying  $500,000  to  bring  the  loans  current 
and  $750,000  to  bring  the  principal  balance  to  $20,500,000.  Cohen  also  suggested  revised  monthly 
interest  payment  amounts.  On  or  about  January  31,  2018,  Sterling  Employee-3  responded  to 
Cohen  at  the  Cohen  Account  and  stated,  in  sum  and  substance,  that  Cohen  would  need  to  pay  the 
entirety  of  the  overdue  payments  and  pay  down  the  principal  balance  of  the  loan  to  $20,000,000 
(in  total,  a  payment  of  approximately  $  1 ,750,000),  and  would  need  to  make  larger  monthly  interest 
payments. 

s.  On  or  about  February  1,2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen 
Account  and  proposed  “[p]ayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if 
[Sterling]  will  waive  past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $1.250m.” 
(Emphasis  in  original.)  Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial 
resources  to  post  additional  collateral  or  pre-fund  monthly  payments.  Based  on  my  participation 
in  an  interview  with  Sterling  Employee-2, 1  have  learned  that  Sterling  continues  to  renegotiate  the 
medallion  loans  with  Cohen  based  on  Cohen’s  representations  about  his  current  financial  position. 
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C.  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 

15.  As  set  forth  in  detail  below,  despite  multiple  representations  by  Cohen  to  Sterling  (and, 
by  extension,  Melrose^)  that  he  had  insufficient  funds  to  pay  down  the  principal  balance  of  the 
medalhon  loans,  make  monthly  interest  payments,  or  pay  past-due  amoxmts,  it  appears  that 
between  2016  and  the  present,  Cohen  opened  and  maintained  bank  accounts  at  First  Republic  Bank 
(“First  Republic”),  and  then  received  millions  of  dollars  in  purported  consulting  payments  in  these 
accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these  accounts  and  received  these 
funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling  about  his  personal  finances 
(including  his  assets  and  liabilities)  and  his  ability  to  make  payments  on  the  medallion  loans.  In 
these  disclosures  to  Sterling — and  despite  being  asked  about  these  bank  accounts  by  his 
accoimtant — Cohen  withheld  information  about  liquid  financial  assets  at  First  Republic. 

16.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced  pursuant  to 
a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of  interviews  with  two 
First  Repubhc  employees,  I  have  learned,  among  other  things,  the  following: 

a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts,  some  in  his  own  name  and  others 
in  the  names  of  corporate  entities. 


^  Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Melros^^iat 
Melrose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen-^^^^^H 
transaction.  Based  on  my  review  of  reports  of  interviews  wi<j^^^j^^employees,  l  also  Know 
that  Cohen  called  employees  at  Melrose  regarding  the  Cohen-^^^^^B  transaction. 
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b.  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 
Consultants  Account”).  Cohen  was  the  only  authorized  signatory  on  the  account.  When  Cohen 
opened  the  Essential  Consultants  Account,  a  First  Republic  employee  (“First  Republic  Employee- 
1”)  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your-customer 
questions’  about  the  purpose  of  the  account — ^the  answers  to  which  First  Republic  Employee-1 
entered  into  a  form^ — Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Cohen 
also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the  revenue 
from  his  consulting  business — ^which  he  said  was  not  his  main  source  of  income — separate  from 
his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  the  account  was  not  intended  to  receive — and  does  not  appear  to  have 
received — ^money  in  connection  with  real  estate  consulting  work;  in  addition,  the  account  has 
received  substantial  payments  from  foreign  sources. 

c.  First,  on  or  about  October  27,  2016— the  day  after  he  opened  the  Essential 
Consultants  Account,  Cohen  used  the  account  to  wire  $130,000  to  an  account  held  in  the  name  of 
attorney  Keith  Davidson’s  law  firm.  Based  on  my  review  of  emails  between  Cohen  and  Davidson, 


’  Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

*  First  Republic  Employee- 1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel.  First 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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obtained  pursuant  to  the  Prior  Cohen  Account  Warrants,  I  believe  that  this  payment  did  not  relate 
to  any  real  estate  consulting  work,  but  rather  was  a  “settlement”  payment  made  to  Davidson’s 
client.  ®  Based  on  my  review  of  public  sources,  I  have  learned  that  Davidson’s  client  is  alleged  to 
have  had  an  extramarital  affair  with  Donald  Trump.  On  or  about  February  13, 2018,  Cohen  made 
a  public  statement  that  “[i]n  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to 
facilitate  a  payment  of  $130,000  to  [Davidson’s  client].” 

d.  Second,  I  know  from  my  review  of  First  Republic  bank  records  that  were  scheduled 
by  an  FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  accoimt  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 
from  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  I  know  the 
following: 

i.  Beginning  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  from  an  entity  called  Columbus  Nova  LLC,  which  were  deposited  into  the 
Essential  Consultants  Account.  According  to  public  sources,  Columbus  Nova  is  an  investment 
management  firm  controlled  by  Renova  Group,  an  industrial  holding  company  based  in  Zurich, 
Switzerland  that  is  controlled  by  Russian  national  Viktor  Vekselberg.  From  January  2017  to 
August  2017,  the  Essential  Consultants  Account  received  seven  payments  totaling  $583,332.98 
from  Columbus  Nova  LLC. 


®  Specifically,  I  have  learned  from  my  review  of  bank  records  that  on  or  about  October  26, 
2016,  Cohen  transferred  $131,000  from  a  home  equity  line  of  credit  account  at  First  Republic  to 
the  Essential  Consultants  Account;  on  or  about  October  27,  2016,  Cohen  transferred  $130,000 
from  the  Essential  Consultant  Account  to  an  account  held  in  the  name  of  Davidson’s  law  firm  at  a 
bank  based  in  Los  Angeles;  and  on  or  about  November  1,  2016,  a  wire  transfer  in  the  amount  of 
approximately  $96,645  was  made  from  Davidson’s  account  to  a  bank  account  in  the  name  of 
Davidson’s  client. 
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ii.  Beginning  on  or  about  April  5,2017,  Cohen  began  receiving  payments  from 
Novartis  Investments,  SARL,  which  I  believe  to  be  the  in-house  financial  subsidiary  of  the  Swiss 
pharmaceutical  company  Novartis  International  AG  (“Novartis”).  Between  April  2017  and  January 
2018,  the  Essential  Consultants  Account  received  ten  wire  payments  from  a  Swiss  bank  account 
held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980,  for  a  total  of  $999,800. 

iii.  Beginning  in  or  about  April  2017,  the  Essential  Consultants  Account  started 
receiving  wire  payments  from  a  bank  account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  wired  $100,000  to  the 
Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  nine  $50,000  payments  from  AT&T.  In  total,  AT&T  wired 
$550,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10,  2017,  June  9,  2017,  July  10,  2017,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is  Korea  Aerospace  Industries  Ltd.  (“KAI”).  KAI  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 
Department  of  Defense,  among  other  customers. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertshank,  a  Kazakhstani  bank.  The  listed  account 
holder  at  Kazkommertsbank  was  a  second  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 
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vi.  In  total,  from  on  or  about  January  31, 2017  to  on  or  about  January  10, 2018, 
the  Essential  Consultants  Aceount  received  approximately  $2,883,132.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  1 0,  20 1 8,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23. 

e.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  “MDC&A  Accounf ’). 
Cohen  was  the  only  authorized  signatory  on  the  account.  Among  other  things,  the  MDC&A 
Account  received  ten  wire  transfers  and  one  check  from  an  account  in  the  name  of  Squire  Patton 
Boggs,  a  law  firm.  In  total,  from  on  or  about  April  5,  2017,  to  on  or  about  January  2,  2018,  the 
MDC&A  Account  received  $426,097.70  in  deposits,  and  the  balance  in  the  account  as  of  January 
2,  2018,  was  $344,541.35.  As  discussed  below,  Cohen  never  disclosed  any  of  the  balance  in  the 
Essential  Consultants  or  MDC&A  accounts  to  Sterling  during  the  negotiations  with  respect  to  the 
transaction,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

17.  Based  on  my  review  of  emails  from  the  Cohen  Account  that  were  seized  pursuant  to 
the  Prior  Cohen  Account  Warrants,  and  my  review  of  reports  of  interviews  with  employees  of 
AT&T  and  Novartis,  it  appears  that  the  aforementioned  payments  to  the  Essential  Consultants 
Accoimt  and  MDC&A  Account  ostensibly  were  for  political  consulting  work,  including  consulting 
for  intemational  clients  on  issues  pending  before  the  Trump  administration.  Specifically,  from 
my  review  of  emails  from  the  Cohen  Account  and  public  sources,  I  have  learned  the  following: 


Based  on  my  review  of  public  sources,  I  have  learned  that  Cohen  is  not  registered  as  a 
lobbyist  or  as  a  person  acting  as  an  agent  of  foreign  principals,  as  may  have  been  required  by  the 
Foreign  Agents  Registration  Act. 
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a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  from  the  Cohen  Account  to  an 
individual  whom  I  believe  is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  document 
purporting  to  be  a  “Consulting  Agreement”  between  KAI  and  Essential  Consultants  dated  as  of 
about  May  1,  2017.  The  document  indicates  that  Essential  Consultants  would  render  “consulting 
and  advisory  services,  as  requested”  by  KAI,  and  that  KAI  would  pay  Essential  Consultants  “a 
consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000.00)  US  Dollars,”  disbursed 
through  eight  $150,000  installments  between  May  2017  and  December  2017. 

b.  On  or  about  May  10,  2017,  Cohen  sent  an  email  from  an  alternate  email  address, 
copying  the  Cohen  Account,  to  an  employee  of  BTA  Banlc.  To  the  email,  Cohen  attached  an 
invoice  to  BTA  Bank  in  the  name  of  Essential  Consultants.  The  invoice  contemplated  a  $150,000 
payment  to  Essential  Consultants  for  a  “monthly  consulting  fee.” 

c.  On  or  about  February  13, 2017,  Cohen  emailed  an  AT&T  employee  from  the  Cohen 
Account  what  appears  to  be  a  consulting  agreement,  which  contemplates  that  Essential  Consultants 
“shall  render  consulting  and  advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential 
Consultants]  of  those  issues  and  matters  with  respect  to  which  AT&T  Services  desires  [Essential 
Consultants] ’s  assistance  and  advice.”  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his 
services  ...  a  consulting  fee  of  Fifty  Thousand  ($50,000)  Dollars  .  .  .  per  month.”  Based  on  my 
review  of  reports  of  interviews  with  AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen 
to  consult  on  political  issues,  including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner, 
and  tax  reform. 

d.  On  or  about  January  17,  2017,  Cohen  emailed  to  a  representative  of  Novartis  from 
the  Cohen  Account  a  contract  between  Novartis  and  Essential  Consultants,  which  provides  that 
Essential  Consultants  will  “provide  consulting  and  advisory  services  to  Novartis  on  matters  that 
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relate  to  the  repeal  and  replacement  of  the  Affordable  Care  Act  in  the  US  and  any  other  issues 
mutually  agreeable  to  [Essential  Consultants]  and  Novartis.”  The  contract  provides  for  a 
“consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to 
Essential  Consultants  in  even  monthly  installments  over  the  course  of  a  year.  Based  on  my  review 
of  reports  of  interviews  with  Novartis  employees,  I  have  learned  that  Novartis  retained  Cohen  to 
provide  political  consulting  services  and  to  gain  access  to  relevant  policymakers  in  the  Trump 
Administration. 

e.  On  or  about  April  3,  2017,  Squire  Patton  Boggs,  a  law  firm,  announced  on  its 
website  that  is  had  formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would 
“jointly  represent  clients.” 

18.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
provided  by  Getzel,  and  my  review  and  I 

have  learned  the  following: 

a.  In  or  about  May  2017,  Getzel  met  with  Cohen  at  a  law  firm  in  Manhattan,  New 
York.  At  the  meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice 
called  Michael  D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants 
LLC.  Cohen  told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in 
connection  with  his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to 
be  between  five  and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  at  the  Cohen 
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Account  in  which  Getzel  wrote  that  “[a]ttached  is  a  draft  of  the  newPFS  as  of  September  30, 2017” 
and  attached  a  draft  of  the  September  2017  Financial  Statement.  The  draft  statement  reflected  that 
as  of  September  30,  2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately 
$33,430,000  (comprised  of  taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence 
and  property),  and  liabilities  of  approximately  $45,630,000,  leaving  him  purportedly  over  $12 
million  in  debt.  In  the  same  email,  Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact 
that  the  financial  statement  did  not  list  any  assets  associated  with  either  the  Essential  Consultants 
Account  or  the  MDC&A  Account:  “[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  - 
Michael  D.  Cohen  &  Associates  POC  [.szc]  and  Essential  Consultants  EEC.  Please  advise  whether 
or  not  these  should  be  disclosed  and  what  value.” 

c.  On  or  about  October  6,2017,  Cohen  called  Getzel  by  telephone — ^which  is  reflected 
on  toll  records  for  Cohen’s  cellphone — and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value. 

d.  On  or  about  October  6, 20 1 7,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 
Account,  responded  to  Getzel’s  email  with  the  answer  “[IJooks  good  to  me.”  Cohen  never  directed 
Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Fmancial 
Statement.  Neither  Essential  Consultants  nor  MDC&A  was  listed  on  the  September  20 1 7  Financial 
Statement  that  was  provided  to  Sterling. 

19.  Based  on  the  foregoing,  and  from  my  review  of  banlc  records  and  emails  sent  by  Cohen 
to  Sterling,  I  know  that  the  September  2017  Financial  Statement  made  no  mention  whatsoever  of 
assets  that  Cohen  held  in  the  Essential  Consultants  Account  or  the  MDC&A  Account.  As  of 
September  30,  2017 — the  date  of  the  September  2017  Financial  Statement — Cohen  had 
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approximately  $673,729.95  in  the  Essential  Consultants  Account  and  $248,619.28  in  the  MDC&A 
Account.  As  of  October  6, 2017,  the  date  when  Getzel  asked  Cohen  about  the  two  accounts,  Cohen 
had  approximately  $823,709.95  in  the  Essential  Consultants  Account  and  $248,619.28  in  the 
MDC&A  Account. 

Cohen  Understated  His  Available  Cash 

20.  In  addition  to  withholding  the  existence  of  the  Essential  Consultants  Account  and  the 
MDC&A  Account  from  Sterling  and  Melrose,  it  appears  that  Cohen  also  substantially  understated 
his  available  cash  and  cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  from  my 
review  of  the  September  2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen 
represented  that  he  had  $1,250,000  in  cash  as  of  September  30,  2017.  But,  from  my  review  of  a 
summary  of  bank  records  that  were  scheduled  by  an  FBI  forensic  accountant,  I  have  learned  that 
Cohen  had  over  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30,  2017.  Specifically, 
from  my  review  of  the  account  schedule  and  bank  records,  I  have  learned  the  following: 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 

c.  AsofSeptember30, 2017,  Cohen  had  $260,689. 18  in  an  account  at  Signature  Bank. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30, 2017. 

f.  As  of  September  30, 2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  his  name  and  one  held  jointly  with  his 
wife — and  the  total  balance  across  the  two  accounts  as  of  September  30,  2017  was  $300,096.72. 

h.  In  total,  as  of  September  30,201 7,  Cohen  had  at  least  $5,0 14,05 1 .80  in  his  accounts 
at  Capital  One  Bank,  Signature  Bank,  TD  Bank,  Bethpage  Credit  Union,  First  Republic,  and 
Morgan  Stanley. 

21 .  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to  Sterling 
and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen  withheld 
information  regarding  approximately  $5  million  in  funds  from  Sterling  and  Melrose,  in  order  to 
secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews  with  Sterling 
Employee-1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling  and  Melrose 
would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to  renegotiate 
Cohen’s  medallion  loans  and  on  what  terms,  or  approve  of  the  transfer  of  those  loans  to 


Cohen  Had  a  Side  Agreement  With  1 


22.  As  set  forth  in  detail  below,  it  appears  that  during  the  course  of  Cohen’s  negotiations  to 


sell  his  interest  in  taxi  medallions  and  the  associated  debt  to 


Cohen  not  only 


misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  deal  he  had 


negotiated  with 


[it  appears  that 


agreed  to  pay  an  above-market  price  for 


Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay 


approximately 
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$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  reports  prepared  by  law  enforcement  officers  of  interviews  with  Sterling 
Employee-1,  as  well  as  my  participation  in  an  interview  with  Sterling  Employee-2, 1  have  learned, 
among  other  things,  the  following: 

a.  On  or  about  September  5,  2017,  an  executed  term  sheet  was  circulated  by  Sterling 
Employee-1  to  Cohen  andij^H^H  See  supra  T|  14(k).  According  to  the  term  sheet, 

would  borrow  $20,000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medalhons 
that  ^^^^^^was  to  acquire  from  Cohen.  At  a  price  of  $20  million  for  thirty-two  taxi  medallions, 
the  proposed  transaction  valued  each  medallion  as  worth  $625,000.  The  term  sheet  also 
contemplated  a  $1,265,913  pay-down  of  the  principal  balance  of  the  loan.  The  term  sheet  made  no 
mention  of  a  $3.8  million  payment  from  Cohen  to  |||||||||||||||^^  or  any  other  form  of  payment  or 
financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 
describing  the  terms  of  the  Cohen-^^^^^^transaction  and  the  new  loan  tc||||||||||||||||||^^ 

not  mention  any  payments  from  Cohen  to  including  a  $3.8  million  payment.  The 

memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medallion”  but  “it  is  recognized  that  this  is  not  in  line  with  current  market  values.”  Indeed, 
according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
20 1 8,  taxi  medallions  sold  for  amounts  ranging  from  $  120,000  to  $3 72,000.  According  to  Sterling 
Employee-1  and  Sterling  Employee-2,  they  were  never  told  that  |m||||||||||||  agreed  to  a  purchase 
price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  make 
any  payment  to 
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23.  While  Cohen  did  not  disclose  any  payment  from  Cohen  to 

communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  a  report  prepared  by  law 
enforcement  agents  of  an  interview  with  Getzel,  I  have  learned  the  following,  in  substance  and  in 
part,  regarding  the  proposed  side-payment  from  Cohen  to|^^^^^^| 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  “Getzel  Memorandum”). 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and 

in  part,  as  follows:  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  their  bank  indebtedness,  upon  the  [Cohens’]  paying  down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800,000.”^^ 

b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 

pa)mient  of  $3,800,000  but  Getzel  did  not  know  where  Cohen  was  going  to  obtain 

$3,800,000  to  pay  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 

cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $1.25  million  in  cash. 

24.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 
with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and  ^^^^^|was  aware  of  the  planned  $3.8  million 
side  payment  from  Cohen  to 


The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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D.  Probable  Cause  Regarding  the  Subject  Accounts 

25.  As  set  forth  above,  since  at  least  September  2015,  if  not  earlier,  Cohen  has  told  Sterling 
that  he  has  difficulty  making  payments  on  his  medallion  loans  and,  since  at  least  October  2016, 
Cohen  has  been  actively  engaged  in  an  attempt  to  sell  his  taxi  medallions  and  the  associated  debts 
In  the  course  of  doing  so,  Cohen  has  used  the  Cohen  Account  and/or  MDCPC 
Account  to  engage  in  email  communications  regarding  the  terms  of  the  transactions  and  the 
side-payment  at  the  Account, 

the  Accoimt,  and  at  th^^^^Accoimt. 

as  described  above,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  have  been  used 
regarding  the  proposed  Cohen-^^^^^|  transaction  with  Sterling: 

a.  Cohen  has  used  the  Cohen  Account  to,  among  other  things,  negotiate  a  pay-down 
of  the  principal  amount  of  the  loan,  see  supra  T|  14(g),  to  send  term  sheets  to  Sterling,  see  supra  If 
14(j),  to  communicate  with  his  accountant  about  the  contents  of  financial  statements,  see  supra  If 
16,  to  send  financial  statements  to  Sterling,  see  supra  14(i),  (1),  to  check  on  the  status  of  the 
transaction  as  of  January  24,  2018,  see  supra  T|  14(n),  to  negotiate  a  reduction  of  his  debt  with 

.  Sterling  on  or  around  January  31, 2018,  see  supra  T|  14(o),  to  tell  Sterling  on  February  1, 2018,  he 
does  not  have  the  ability  to  pay  more  than  $1 ,250,000,  see  supra  Tf  14(p),  and  to  communicate  with 
individuals  responsible  for  sources  of  payments  to  the  Essential  Consultants  Account,  see  supra  If 
15.  In  other  words,  from  the  communications  described  above,  it  appears  likely  that  the  Cohen 
Account  will  contain  recent  evidence  of  the  Subject  Offenses,  including  communications  and 
potential  misrepresentations  to  Sterling,  and  evidence  indicating  that  statements  made  to  Sterling 
are  false  or  misleading. 

b.  the  ^^^^^^^^^|Account  to  communicate 

the  proposed  taxi  medallion  transaction  with  Cohen,  which  appears  to  have  been  discussed  as  early 
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as  October  2016.  See  supra  f  14(g).  Specifically,  as  described  above,  as  early  as  May  2, 2017, 
lused  the  Account  to  inquire  about  the  status  of  the  transaction, 

see  supra  Tf  14(h).  He  used  the  j^^^^^^^^^Account  to  exchange  drafts  of  the  proposed  term 
sheet  with  Cohen,  UU  and  Sterling,  see  supra  ^  14(j).  The  Account  was  also 

used  by  send  a  personal  financial  statement  for to  Sterling, 

see  supra  ^  14(1).  The  ^^^^^^^^^^Account  was  copied  on  emails  from  the 
Account  about  the  transaction,  see  supra  ^  14(i),  and  was  listed  on  [|||||^|^|^H||  financial 
statement  as  the  contact  email  see  supra  ^  14(m).  Additionally,  based  on  my 

review  of  MDCPC  Header  Information,  I  know  that  on  or  about  September  1,  2017 — ^at  or  around 
the  time  the  Cohen  were  negotiating  a  term  sheet — the 

|Account  to  send  and  receive  eight  emails  from  Cohen  at  the  MDCPC  Account. 
|has  used  the^^Jkccount  to  communicate  with  Sterling  employees,  Cohen, 
and  .^^^^^^^^^^about  the  proposed  taxi  medallion  transaction  since  at  least  December  2016. 
See  supra  TfTf  14(g),  24(c).  Specifically,  on  or  about  August  29,  20 1 7,  told  Sterling  that  he 

should  be  included  on  “all  future  e-mails”  involving  the  proposed  transaction,  see  supra  Tf  14(j). 
Additionally,  ^^^|was  involved  in  making  revisions  to  the  parties’  term  sheets,  and  he  told 
Sterling  on  January  29, 2018  that^^^^^Jwould  not  go  forward  with  the  planned  transaction, 
see  supra  ^  14(j),  (n).  Accordingly,  there  is  probable  cause  to  believe  that  the^^jAccoimt  will 
contain  evidence  of  the  negotiations  between  Sterling  and  the  parties,  evidence  of  a  payment  from 
Cohen  to  laid  the  reasons  for  the  collapse  of  the  Cohen-^^^^^H  transaction. 


For  instance,  from  records  provided  by  Sterling,  I  know  that  on  or  about  December  2, 
2016,^^^^^^^^^|sent  an  email  to  a  Sterling  employee  using  the| 

Account.  The  email  forwarded  correspondence  between^^^who  was  using  thel 
Accoxmt,  and  an  employee  of  Capital  One  regarding  extending  loan  with 

Capital  One. 
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26.  Additionally,  it  appears  that  Cohen  set  up  the  MDCPC  Account  to  receive  emails  he 
was  previously  receiving  at  the  Cohen  Account.  Specifically,  based  on  my  review  of  records 
maintained  by  AT&T,  I  have  learned  that  on  or  about  May  5,  2017,  Cohen  sent  an  email  from  the 
MDCPC  Account  to  a  blind  copy  list  of  recipients  stating  that  “[d]ue  to  the  overwhelming  volume 
of  phone  calls  and  emails  coming  into  my  previous  cellular  number  and  e-mail  address,  I  have 
elected  to  create  for  Clients  Only  the  following.  Kindly  use  this  new  information  for  all  future 
contact  and  communications.”  The  signature  line  on  the  email  listed  “Essential  Consultants  LLC” 
and  “Michael  D.  Cohen  &  Associates,  PC,”  as  well  as  the  MDCPC  Account  as  the  email  address. 

27.  In  addition,  based  on  my  review  of  emails  from  the  MDCPC  Account  produced 
pursuant  to  the  Prior  Cohen  Account  Warrants  and  the  MDCPC  Header  Information,  I  have  learned 
that  Cohen  has  used  the  MDCPC  Account  to  send  and  receive  emails  from  the  Cohen  Account,  to 
communicate  with  th(^^^|\ccount,  and  to  send  and  receive  emails  from  other  email  accounts 
about  his  political  consulting  business.  Additionally,  from  my  review  of  the  MDCPC  Header 
Information,  it  appears  that  since  the  November  13, 2017  search  warrant  on  the  MDCPC  Account, 
Cohen  has  continued  to  send  and  receive  emails  at  the  MDCPC  Account  that  appear  likely  to  be 
relevant  to  the  commission  of  the  Subject  Offenses.  For  example,  emails  obtained  pursuant  to  the 
Prior  Cohen  Account  Warrants,  as  well  as  the  MDCPC  Header  Information  have  revealed  the 
following: 

a.  On  approximately  eight  occasions  in  August  and  September  2017,  while  Cohen, 
were  communicating  about  a  term  sheet  for  the  Cohen-"^^^^^Htaxi 


Based  on  my  review  of  emails  from  the  MDCPC  Account  obtained  pursuant  to  subpoena,  I 
have  learned  that  Cohen  has  used  the  account  to  communicate  with  numerous  individuals  with 
whom  he  does  not  enjoy  an  attorney-client  privilege,  including  some  of  the  individuals  described 
below.  See  infra  Tf  27. 
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medallion  transaction,  see  supra  ^  14(k),  Cohen  used  the  MDCPC  Account  to  send  or  receive 
emails  from^^^it  the^^J^ccount.  For  instance,  on  or  about  August  22,  2017,  ^^|used 
the^^|\ccount  to  send  an  email  to  Sterling  Employee- 1  and  copied  Cohen  on  the  email  at  the 
MDCPC  Account.  On  the  same  day,  Sterling  Employee-1  responded  to^^fat  the^^Jkccount 
and  Cohen  at  the  MDCPC  Account.  On  or  about  August  22,  2017,  Cohen  also  used  the  MDCPC 
Account  to  send  an  email  to  Sterling  Employee-1. 

b.  As  noted  above,  on  or  about  September  1,  2017,  Cohen  used  the  MDCPC  Account 
to  send  or  receive  eight  emails  with  the  |^H||^||||||m  Account. 

c.  Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who 
work  at  companies  with  whom  it  appears  Cohen  has  a  political  consulting  agreement.  For 
example,  beginning  in  April  2017 — ^the  same  month  when  Cohen  began  receiving  payments  from 
AT&T,  see  supra  16(d),  17(c) — Cohen  used  the  MDCPC  Account  to  send  and  receive  emails 
from  AT&T  employees.  These  emails  contain,  among  other  things,  invoices  from  Cohen  to  AT&T 
for  consulting  work  by  Cohen.  Similarly,  beginning  in  April  2017 — ^which  is  also  the  month 
Cohen  began  receiving  payments  from  Novartis  for  consulting  work,  see  supra  TfT|  16(d),  17(d) — 
Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  from  employees  of  Novaifis.  These 
emails  concern,  among  other  things,  invoices  from  Cohen  and  requests  for  Novartis  for  Cohen’s 
assistance  on  an  initiative  relating  to  drug  pricing. 

d.  From  my  review  of  the  MDCPC  Header  Information,  I  have  learned  that  Cohen  has 
continued  to  use  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who  work  at 
companies  with  whom  it  appears  Cohen  had  a  political  consulting  agreement,  such  as  Novartis  and 
AT&T.  For  instance,  on  approximately  six  occasions  between  November  28,  2017  and  January 
30,  2018,  the  MDCPC  Account  was  used  to  send  and  receive  emails  from  accounts  belonging  to 
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individuals  using  @att.com  email  addresses.  Similarly,  on  approximately  seventeen  occasions 
between  December  1,  2017  and  February  20,  2018,  the  MDCPC  Account  was  used  to  send  and 
receive  emails  from  accounts  belonging  to  individuals  using  @novartis.com  email  addresses. 
Since  November  15, 2017,  the  MDCPC  Account  has  also  sent  and  received  emails  with  individuals 
using  the  email  domains  @bta.kz,  which  I  believe  is  the  email  domain  used  by  employees  of  BTA 
Bank,  see  supra  16(d),  17(b),  and  @squirepb.com,  which  I  believe  is  the  email  domain  used  by 
employees  of  the  law  firm  Squire  Patton  Boggs — ^both  of  which  Cohen  appears  to  have  a 
consulting  relationship  with,  see  supra  TIH  16(e),  17(e).  Accordingly,  it  appears  that  Cohen 
continues  to  use  the  MDCPC  Account  to  send  and  receive  emails  that  will  be  relevant  to  whether 
he  is  maintaining  a  consulting  business,  what  type  of  consulting  work  he  is  doing,  and  whether  he 
is  receiving  money  for  that  consulting  work. 

28.  In  addition  to  the  foregoing,  based  on  my  review  of  the  Pen  Register  Data,  see  supra 
9,  it  appears  that  since  the  date  of  the  last  search  warrant  on  the  Cohen  Account  {i.e.,  November 
13,  2017),  Cohen  has  continued  to  use  the  Cohen  Account  to  communicate  with  the 
j^^l^H^ccount,  the^^jAccount,  and  other  email  accounts  that  appear  likely  to  be  relevant 
to  the  commission  of  the  Subject  Offenses  described  above.  For  example,  the  Pen  Register  Data 
has  revealed  the  following: 

a.  Emails  sent  by  the  Cohen  Account  to  the^^^JVccount  on  or  about  December  18, 

2017  at  8:26  p.m.,  December  21,  2017  at  9:35  p.m.,  December  22,  2017  at  4:32  p.m.,  Januai7  3, 

2018  at  8:01  a.m.,  January  3, 2018  at  2:56  p.m.,  and  January  4,  2018  at  3:31  p.m. 

b.  An  email  sent  by  the  Cohen  Account  to  the  .^^^^^^^^^^Account  on  or  about 
January  25,  2018  at  8:55  p.m. 


02.28.2018 


36 


Case  l:18-cr-00602-WHP  Document  48-3  Filed  07/18/19  Page  37  of  67 


on  or 


c.  Emails  from  the  Cohen  Account  to  the  email  account 
about  December  1,  2017  at  2:14  p.m.,  December  29,  2017  at  10:20  p.m.,  January  2,  2018  at  3:52 
p.m.,  January  2,  2018  at  5:44  p.m.,  and  January  8,  2018  at  6:38  p.m.  Based  upon  my  review  of 
emails  contained  in  the  Cohen  Account,  I  have  learned  that  the^^H^J^^^HIIemail  account 
belongs  to  Jeffrey  Getzel,  Cohen’s  accountant,  through  whom  Cohen  made  misrepresentations  to 
financial  institutions,  as  discussed  above. 

d.  Emails  from  the  Cohen  Account  to  email  accounts  belonging  to  Sterling  employees, 
including  Sterling  Employee-1,  on  or  about  January  25,  2018  at  10:23  p.m.,  January  26,  2018  at 
12:55  a.m.,  January  29, 2018  at  5:30  p.m.,  January  29, 2018  at  8:29  p.m.,  January  30, 2018  at  6:44 


p.m. 

e.  An  email  sent  from  the  Cohen  Account  to  the  email  accoimt 
clientserviceny@firstrepublic.com  on  or  about  January  25,  2018  at  5:29  p.m.  As  stated  above. 
First  Republic  is  the  bank  at  which  the  Essential  Consultants  Account  is  held. 

f  Numerous  emails  sent  from  the  Cohen  Account  to  the  email  account 
including  emails  on  or  about  December  4, 2017  at  2: 17  p.m.  and  January  29, 
20 1 8  at  5 :43  p.m.  Based  upon  the  email  address  and  domain  name,  as  well  as  my  review  of  reports 
of  interviews  and  documents  reflecting  that  Cohen’s  taxi  medallions  were  leased  and  operated  by 

I  believe  that  the  email  address  belongs  to 


29.  Based  on  my  review  of  records  maintained  by  Sterling,  I  know  that  Cohen  used  the 
Cohen  Account  to  send  and  receive  documents  related  to  the  Cohen-^^^^^^|t3:ansaction. 
Based  on  my  training  and  experience,  I  know  that  Google  allows  users  of  e-mail  accounts  to  easily 
save  documents  to  file  sharing  and  retention  platforms  such  as  Google  Docs  and  Google  Drive.  I 
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also  know,  from  my  training  and  experience,  that  users  of  e-mail  accounts  often  use  instant 
messaging  interfaces  linked  to  their  email  accounts.  Further,  I  have  learned  that  the  Providers 
maintain  records  of  search  and  web  histories  associated  with  email  accounts  and,  based  on  my 
training  and  experience,  users  of  e-mail  accounts  use  associated  web  search  browsers  associated 
with  a  subscriber’s  account  to  research  topics  they  are  e-mailing  about.  Accordingly,  there  is 
probable  cause  to  believe  that  content  information  associated  with  the  Subject  Accounts  will  also 
contain  evidence  related  to  the  Subject  Offenses. 

30.  Thus,  I  respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other 
content  information  from  the  Subject  Accounts  will  contain  evidence  of  Cohen’s  efforts  to  sell  his 
taxi  medallions  and  the  associated  debt,  and  his  misrepresentations  and  omissions  to  Sterling  and 
Melrose  in  connection  with  these  negotiations.  Although  Cohen  appears  to  have  communicated 
with  and  primarily  through  the  Cohen  Account 

MDCPC  Accormt,  I  know,  based  on  my  involvement  in  the  investigation,  that  Cohen  also  used  at 
least  one  other  email  account  associated  with  his  position  at  the  Trump  Organization.  Thus,  I 
respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other  content  information 
from  the  Account,  .m||H||||||m||||  Account  and  '^^^Account  since  on 

about  October  1,  2016 — ^the  approximate  date  of  when  Cohen’s  efforts  to  sell  his  taxi  medallions 
and  the  associated  debt  began — ^will  reflect  communications  with  the  Cohen  Account,  MDCPC 
Account,  and  possibly  one  or  more  additional  accounts  used  by  Cohen,  and  probable  cause  to 
believe  that  such  emails  will  constitute  evidence  of  Cohen’s  commission  of  the  Subject  Offenses, 
including  the  extent  to  which  Cohen  did  or  did  not  inform  other  individuals  involved  in  the  conduct 
described  above — such  his  misstatements  and 

omissions  to  financial  institutions. 
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^1  Temporal  T, imitation.  This  application  seeks  all  emails  and  other  requested  content 
information  specified  in  Attachments  A,  B,  C,  and  D  for  the  following  periods: 

a.  For  the  Cohen  Account,  this  application  seeks  all  emails  sent,  created,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above, 
pursuant  to  the  Prior  Cohen  Account  Warrants,  the  SCO  obtained  and  provided  to  the  USAO 
emails  from  the  Cohen  Aeeount  that  were  sent,  created,  or  received  before  November  14,  2017. 
This  application  also  seeks  other  information  specified  above  associated  with  the  Cohen  Aeeount 
that  was  ereated  between  December  1,  2014  (the  month  when  Cohen  entered  into  the  medallion 
loans  with  Sterling),  and  the  date  of  the  proposed  warrant,  inclusive. 

b.  For  the  MDCPC  Account,  this  application  seeks  all  emails  sent,  ereated,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above, 
pursuant  to  a  prior  warrant,  the  SCO  obtained  and  provided  to  the  USAO  emails  from  the  MDCPC 
Aeeount  that  were  sent,  created,  or  received  before  November  14,  2017. 

c.  For  the^^^^^^^^Account  and  .^^^^^^^^Account,  this  application 
seeks  emails  and  all  other  content  information  specified  above  sent,  created,  or  received  between 
Oetober  1,  2016,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above,  Oetober 
2016  is  the  month  in  whieh  Cohen  began  negotiating  the  taxi  medallion  sale  with 

d.  For  the  Account,  this  application  seeks  emails  and  all  other  content 

information  specified  above  sent,  created,  or  received  between  December  1,  2016,  and  the  date  of 
the  proposed  warrant,  inclusive.  As  described  above,  December  2016  is  the  month  in  whieh^^^| 
began  representing  the^|||||||||||||||^^^^  relation  to  the  taxi  medallion  transaction. 

E.  Evidence,  Fruits  and  Instrumentalities 

32.  Based  upon  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Google’s  servers  associated  with  the  Cohen  Account  will  contain  evidence, 

39 
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fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  as  more  fully  described  in 
Section  II  of  Attachment  A  to  the  proposed  warrant  for  the  Cohen  Account  and  MDCPC  Account, 
including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the  Cohen  Account  or  MDCPC  Account. 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling,  Melrose, 
and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  or  liabilities,  to  others,  including  to^^^^^^^^^|and/or  entities 
associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature 
and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  & 
Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Cohen  Account  and/or  MDCPC  Account  about  any  matters  relating  to 
Essential  Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to^^^^^^^^|and/or  entities  associated  with  him; 

f.  Communications  between  the  Cohen  Account  and/or  MDCPC  Accoimt  and  Jeffrey 
Getzel  relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 
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g.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Cohen  Account  and  MDCPC  Account  was 
accessed  or  used,  to  determine  the  geographic  and  chronological  context  of  account  access,  use, 
and  events  relating  to  the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Cohen  Account  and  MDCPC  Account  owner’s  intent  as  it 
relates  to  the  Subject  Offenses  under  investigation. 

33.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Google’s  servers  associated  with  the^^^^^^^^^^^A-Ccount  andj^^^J 
^^^^^H^ccount  will  contain  evidence,  fruits,  and  instrumentalities  of  violations  of  the  Subject 
Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 

identity  of  the  person(s)  who  created  or  used  Account 

Account; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 
or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  ^^^^^^^and/or  entities  associated 
with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
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communicated  with  the  Account  Account  about  any 

matters  relating  to  any  plan  or  proposal  or  agreement  for  Cohen  and/or  entities  associated  with  him 
to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  i^| 
^^^^^^|md/or  entities  associated  with  him; 

d.  Communications  between  the  ^||||||||||||||||^^  Account 

Account  and  others,  including  employees  or  representatives  of  Sterling,  Melrose,  or  other  financial 
institution(s),  regarding  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Account  and 

Account  were  accessed  or  used,  to  determine  the  geographic  and  chronological  context 

of  account  access,  use,  and  events  relating  to  the  crimes  under  investigation  and  to  the  account 
owner; 

g.  Evidence  indicating  Account  and  Account 

owners’  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

34.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Oath’s  servers  associated  with  the^^^|\ccormt  will  contain  evidence, 
fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the^^BAccount; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 
or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  ^^^^^^^^^|and/or  entities  associated 
with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  UU^-Ccount  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  or  liabilities,  to  ^^^^^^^^|and/or  entities  associated  with  him; 

d.  Communications  between  the  JH^ccount  and  others,  including  employees  or 
representatives  of  Sterling,  Melrose,  or  other  financial  institution(s),  regarding  Cohen’s  finances; 
and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

ni.  Review  of  the  Information  Obtained  Pursuant  to  the  Warrant 

35.  Pursuant  to  18  U.S.C.  §  2703(g),  the  presence  of  a  law  enforcement  officer  is  not 
required  for  service  of  a  search  warrant  issued  under  §  2703,  or  for  the  collection  or  production  of 
responsive  records.  Accordingly,  the  warrant  requested  herein  will  be  transmitted  to  the  Providers, 
which  shall  be  directed  to  produce  a  digital  copy  of  any  responsive  records  to  law  enforcement 
personnel  within  30  days  from  the  date  of  service.  Law  enforcement  personnel  (including,  in 
addition  to  law  enforcement  officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the 
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status  of  the  investigation  and  related  proceedings,  attorneys  for  the  government,  attorney  support 
staff,  agency  persoimel  assisting  the  government  in  this  investigation,  and  outside  technical  experts 
under  government  control)  will  retain  the  records  and  review  them  for  evidence,  fruits,  and 
instrumentalities  of  the  Subject  Offenses  as  specified  in  Section  III  of  Attachments  A,  B  and  C  to 
the  proposed  warrant. 

36.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  methods  to 
locate  evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses,  including  but  not  limited  to 
undertaking  a  cursory  inspection  of  all  emails  within  the  Subject  Account.  This  method  is 
analogous  to  cursorily  inspecting  all  the  files  in  a  file  cabinet  in  an  office  to  determine  which  paper 
evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other  methods  as 
well,  particularly  mcluding  keyword  searches,  I  know  that  keyword  searches  and  similar  methods 
are  typically  inadequate  to  detect  all  information  subject  to  seizure.  As  an  initial  matter,  keyword 
searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated  with  emails, 
including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store  data  as 
searchable  text.  Moreover,  even  as  to  text  data,  keyword  searches  cannot  be  relied  upon  to  capture 
all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of  the  imique 
words  or  phrases  that  investigative  subjects  will  use  in  their  communications,  and  consequently 
there  are  often  many  communications  in  an  account  that  are  relevant  to  an  investigation  but  that 
do  not  contain  any  keywords  that  an  agent  is  likely  to  search  for. 

37.  Because  Cohen  and^^^|ire  attorneys,  the  review  of  the  content  within  the  Subject 
Accounts  will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law 
enforcement  personnel  involved  in  the  investigation,  including  attorneys  for  the  Government, 
collect  evidence  in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable 
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privilege.  When  appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate 
and  apart  from  the  investigative  team,  in  order  to  review  potentially  privileged  communications 
and  determine  which  communications  to  release  to  the  investigation  and  prosecution  team. 

IV.  Request  for  Non-Disclosure  and  Sealing  Order 

38.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not  publicly  known. 
As  a  result,  premature  public  disclosure  of  this  affidavit  or  the  requested  warrants  could  alert 
Cohen  that  he  is  under  investigation,  causing  him  to  destroy  evidence,  flee  from  prosecution,  or 
otherwise  seriously  jeopardize  the  investigation.  M  particular,  based  on  my  experience 
investigating  white  collar  cases,  including  cases  featuring  documents  such  as  agreements,  drafts 
of  agreements,  notes  of  conversations,  and  other  documentary  evidence,  premature  disclosure  of 
an  investigation  may  cause  the  target  of  the  investigation  to  attempt  to  destroy  or  conceal  such 
evidence.  In  addition,  as  also  set  forth  above,  Cohen  uses  computers  and  electronic 
communications  in  furtherance  of  his  activity  and  thus  could  easily  delete,  encrypt,  or  otherwise 
conceal  such  digital  evidence  from  law  enforcement  were  he  to  learn  of  the  Government’s 
investigation.  See  18  U.S.C.  §  2705(b)(3).  Cohen  also  appears  to  have  the  financial  means  that 
would  facilitate  his  flight  from  prosecution.  See  18  U.S.C.  §  2705(b)(2),  (5). 

39.  Accordingly,  there  is  reason  to  believe  that,  were  the  Providers  to  notify  the  subscriber 
or  others  of  the  existence  of  the  warrant,  the  investigation  would  be  seriously  jeopardized. 
Pursuant  to  18  U.S.C.  §  2705(b),  I  therefore  respectfully  request  that  the  Court  direct  the  Providers 
not  to  notify  any  person  of  the  existence  of  the  warrant  for  a  period  of  180  days  from  issuance, 
subject  to  extension  upon  application  to  the  Court,  if  necessary. 

40.  For  similar  reasons,  I  respectfully  request  that  this  affidavit  and  all  papers  submitted 
herewith  be  maintained  under  seal  until  the  Court  orders  otherwise,  except  that  the  Government 
be  permitted  without  further  order  of  this  Court  to  provide  copies  of  the  warrant  and  affidavit  as 
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need  be  to  personnel  assisting  it  in  the  investigation  and  prosecution  of  this  matter,  and  to  disclose 
those  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  this  matter. 


V.  Conclusion 

41.  Based  on  the  foregoing,  I  respectfully  request  that  the  Court  issue  the  warrants  sought 
herein  pursuant  to  the  applicable  provisions  of  the  Stored  Communications  Act,  18  U.S.C. 
§  2703(b)(1)(A)  (for  contents)  and  §  2703(c)(1)(A)  (for  records  and  other  information),  and  the 
relevant  provisions  of  Federal  Rule  of  Criminal  Procedure  41. 


United  States  Attorney’s  Office 
Southern  District  of  New  York 


Sworn  to  before  me  this 


28th  day  of  February,  2018 


02.282018 


46 


UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Account 

^^^H^^^^^^^|naintained 

Pimii^s  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
20I8R00I27 


Search  Warrant  and  Non-Disclosure  Order 

TO:  I  &  I  Internet,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  of  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  account^^^^^^^^^^^^maintamed  at  premises  controlled  by  1 
&  1  Internet,  Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  crime,  all  as  specified  in 
Attachment  D  hereto.  Accordingly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative 
Agencies,  within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in 
Section  11  of  Attachment  D  hereto,  for  subsequent  review  by  law  enforcement  personnel  as 
authorized  in  Sections  III  and  IV  of  Attachment  D.  The  Government  is  required  to  serve  a  copy 
of  this  Warrant  and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant 
and  Order  may  be  served  via  electronic  transmission  or  any  other  means  through  which  the 
Provider  is  capable  of  accepting  service. 
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2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


Date  Issued 


Time  Issupi^ 


Chief  United  Stades  MagiSuate '  Judg^ 
Southern  District  of  I^ew  York 
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Email  Search  Attachment  D 

I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  1  &  1  Internet,  Inc.  (the  “Provider”),  headquartered  at  701  Lee 
Road,  Suite  300,  Chesterbrook,  Pennsylvania  19087,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
[^the  “Subject  Account”)  for  the  time  period  between  November  14,  2017 
and  the  date  of  this  warrant,  inclusive. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  maimer  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  HI  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

f.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  presei-vation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

in.  Review  of  Information  by  the  Government 

Law  enforcement  persomiel  (who  may  include,  in  addition  to  law  enforcement  officers  and 

agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  oflSU.S.C.  §§371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Accoimt; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/ or  taxi  medallions ; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
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medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  The  identity  of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the 
person(s)  -  who  communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential 
Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  fluids  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence,  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 
l@gmail.com, 
l^gmail.com,  and 

Maintained  at 
wemises  Uontrolled  by  Google,  Inc., 
USAO  Reference  No.  2018R00127 


Search  Warrant  and  Non-Disclosure  Order 

TO:  Google,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant  Upon  an  affidavit  of  Special  Agent  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  accounts  ^^^^^^^^gmail.com,  ^^^|@gmail.com,  and 

maintained  at  premises  controlled  by  Google,  Inc.,  contain  evidence, 
fi-uits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachments  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies,  within  7  days  of  the  date 
of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  II  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in  Sections  III  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  serve  a  copy  of  this  Warrant  and  Order 
on  the  Provider  within  7  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be  served  via 
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electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of  accepting 
service. 

2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing,  ft  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 

.  H  C  n  )  n  ) ;  ^ 


Date  Issued 


:iNORABLE  GABBteffW:  GORENSTEIN 
Chief  United  State's 'Magistrate  Judge 
Southern  District  of  New  York 
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Email  Search  Attachment  A 
L  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
@gmail.com  (the  “Subject  Account”)  for  the  time  period  referenced  below. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
ofiBcer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

IL  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  14, 20 1 7  and  the  date  of  this  warrant, 
inclusive. 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1,  2014  and  the  date  of  this  warrant,  inclusive. 

e.  Customer  correspondence.  All  coiTespondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken,  limited  to  items  sent,  received,  or  created  between  Deceimber  1, 2014 
and  the  date  of  this  warrant,  inclusive. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Account,  limited  to  items  sent,  received,  or  created  between  December  1, 2014  and  the  date  of  this 
warrant,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Account,  limited  to  items  sent,  received,  or  created 
between  December  1,  2014  and  the  date  of  this  warrant,  inclusive. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

m.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §  §  371  (conspiracy  to  commit  offense  or  to  defraud 
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the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to  ^^^^^^^^^^and/or 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
T.T.C  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  EEC, 
or  about  any  plaii  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities  associated  with 
him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others, 
including  to^^^^^^^^|and/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
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institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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Email  Search  Attachment  B 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email 
accounts^^^l^gmail.com  and|^^^^^|^^^^^|(the  “Subject  Accounts”)  for  the  time 
period  between  October  1,  2016  and  the  date  of  this  warrant,  inclusive. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Accounts: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Accounts,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Accounts. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  ff  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Accounts, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Accounts,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Accounts. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  'and  instant 
messages  or  Gchats  associated  with  the  Subject  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(Q  or  otherwise. 

ni.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §  §  37 1  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (banlc  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Accounts; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to^^^^^^^^^^^nd/or  entities  associated 
with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Subject  Accounts  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to^^^^^^^^^|nd/or  entities  associated 
with  him; 

d.  Communications  between  the  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  accoxmt  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  accoxmt  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Subject  Accounts  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  Subject  Accounts  owners’  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 


A||neiated  with  the  Email  Account 
^^H^aol.com,  Maintained  at 
Premises  Controlled  hy  Oath,  Inc., 
USAO  Reference  No.  201 8R00127 


Search  Warrant  and  Non-Disclosure  Order 

TO:  Oath,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  of  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  account^^^|^aol.com,  maintained  at  premises  controlled  by  Oath, 
Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachment  C 
hereto.  Accordingly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies, 
within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  11 
of  Attachment  C  hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in 
Sections  III  and  IV  of  Attachment  C.  The  Government  is  required  to  serve  a  copy  of  this  Warrant 
and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be 
served  via  electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of 
accepting  service. 
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2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  fiirther  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosm*e 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York  ,  ■,  i  s ) '  n  , , 


Date  Issued 


Time  Issued 


CfA^^^.  GORENSTEIN 

mief  IJnifsd  States  Magistrate  Judge 
Southern  District  dflTew  York 
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Email  Search  Attachment  C 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Oath,  Inc.  (the  “Provider”),  headquartered  at  22000  AOL  Way, 
Dulles,  Virginia  20166,  and  applies  to  all  content  and  other  information  within  the  Provider’s 
possession,  custody,  or  control  associated  with  the  email  account^^^|@aol.com  (the  “Subject 
Account”)  for  the  time  period  between  December  1,  2016  and  the  date  of  this  warrant,  inclusive. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  infonnation  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’ s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Accormt. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 
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d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

f.  Search  History.  All  search  history  and/or  web  history. 

g.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories,  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

in.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following; 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  tc^^^^^^^^^^^and/or  entities  associated 
with  him; 
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c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to^^^^^^^^^^and/or  entities  associated 
with  him; 

d.  Communications  between  the  Subject  Account  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances;  and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  106  (Rev.  06/09)  Application  for  a  Search  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

A  Device  Containing  the  Results  of  Three  Email 
Search  Warrants,  See  Attachment  A 


APPLICATION  FOR  A  SEARCH  WARRANT 

I,  a  federal  law  enforcement  officer  or  an  attorney  for  the  government,  request  a  search  warrant  and  state  under 
penalty  of  perjury  that  I  have  reason  to  believe  that  on  the  following  person  or  property  (identify  the  person  or  describe  the 

~X-l5^^fea^dQn^a1nfn^g-f[fe^rk^esultsrofehree^Emailr^Search-Warrants7::See--AttaGhmentrA-^^^  . -u-:— 


located  in  the  _ Southern _  District  of _ New  York _ ,  there  is  now  concealed  (identify  the 

person  or  describe  the  property  to  be  seized)'. 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 


The  basis  for  the  search  under  Fed.  R,  Grim.  P.  41(c)  is  (check  one  or  more): 
sT  evidence  of  a  crime; 

□  contraband,  fruits  of  crime,  or  other  items  illegally  possessed; 

□  property  designed  for  use,  intended  for  use,  or  used  in  committing  a  crime; 

□  a  person  to  be  arrested  or  a  person  who  is  unlawfully  restrained. 


The  search  is  related  to  a  violation  of: 

Code  Section  Offense  Description 

18  use  371,  1005,  1014,  Conspiracy  to  defraud  the  United  States;  false  bank  entries;  false  statements  to  a 

1343,  1344  financial  institution;  wire  fraud;  bank  fraud 


The  application  is  based  on  these  facts: 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 


sf  Continued  on  the  attached  sheet. 

sf  Delayed  notice  of  30  days  (give  exact  ending  date  if  more  than  30  days:  _ 
under  18  U.S.C.  §  3 103a,  the  basis  of  which  is  set  forth  on  the  attached  sheet. 


)  is  requested 


Sworn  to  before  me  and  signed  in  my  presence. 


Date 


City  and  state; 


Hon.  Gabriel  W.  Gorenstein,  U.S.* Magistrate  Judge 

Printed  name  and  title 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  Of  America  for  a  Search  Warrant  for  A 
Device  Containing  the  Results  of  Three  Email 
Search  Warrants,  USAO  Reference  No 
2018R00127 


Agent  Affidavit  in  Support  of 
Application  for  a  Search  Warrant 


TO  BE  FILED  UNDER  SEAL 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 


Special  Agent 


of  the  United  States  Attorney’s  Office  for  the  Southern 


District  of  New  York,  being  duly  sworn,  deposes  and  says: 


I.  Introduction 


A.  Affiant 


1.  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern 
District  of  New  York  (the  “USAO”).  I  have  been  a  Special  Agent  with  the  USAO  since  August 
2016.  I  previously  served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector 
General  from  May  2011  to  August  2016.  In  the  course  of  my  experience  and  traming  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions.  I  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  search  of  email  accounts. 

2.  I  make  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 
Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  electronic  device  specified  below  (the 
“Subject  Device”)  for  the  items  and  information  described  in  Attachment  A.  This  affidavit  is  based 
upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enforcement  personnel;  and  my  training,  experience  and  advice  received  concerning  the 
use  of  computers  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored  information 
(“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of  establishing  probable 
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cause,  it  does  not  include  all  the  facts  that  I  have  learned  during  the  eourse  of  my  investigation. 
Where  the  contents  of  doeuments  and  the  actions,  statements,  and  eonversations  of  others  are 
reported  herein,  they  are  reported  in  substance  and  in  part,  except  where  otherwise  indieated. 

B.  Prior  Warrants  and  the  Subject  Device 

3.  As  set  forth  in  detail  below,  the  US  AO  and  the  Federal  Bureau  of  Investigation 
(“FBI”)  are  investigating,  among  other  things,  a  scheme  by  Michael  Cohen  to  defraud  multiple 
banks.  Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President 
Donald  Trump,  and  who  previously  served  for  over  a  decade  as  an  exeeutive  in  the  Trump 
Organization,  an  international  conglomerate  with  real  estate  and  other  holdings. 

4.  fri  eonnection  with  an  investigation  then  being  conducted  by  the  Offiee  of  the 
Speeial  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  (collectively,  the 
“SCO  Warrants”)  for  emails  and  other  content  information  associated  with  two  email  aeeounts 
used  by  Cohen.  Specifically: 


On  or  about  July  1 8, 2017,  the  FBI  sought  and  obtained  a  seareh  warrant  for 


a. 


emails  in  the  aceount 


fegmail.com  (the  “Cohen  Gmail  Aeeount”)  sent  or  reeeived 


between  January  1,  2016  and  July  18,  2017.  This  warrant,  which  is  numbered  17-mj-00503,  is 
attaehed  as  Exhibit  A  (the  “First  Cohen  Gmail  Warrant”). 


b.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  seareh 


warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 


November  13, 2017.  This  warrant,  which  is  numbered  17-mj-00855,  is  attaehed  as  Exhibit  B  (the 
“Seeond  Cohen  Gmail  Warrant”). 


e. 


On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 


warrant  for  emails  in  the  account 


|the  “Cohen  MDCPC  Account”)  sent  or 


3 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  4  of  105 


received  between  the  opening  of  the  Cohen  MDCPC  Account^  and  November  13,  2017.  This 
warrant,  which  is  numbered  17-mj-00854,  is  attached  as  Exhibit  C  (the  “Cohen  MDCPC 
Warrant”). 

5.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBTs  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  SCO  Warrants.  A  filter  team  working  with  the  SCO 
had  previously  reviewed  the  e-mails  produced  pursuant  to  the  SCO  Warrants  for  privilege. 

6.  These  emails  are  contained  on  the  Subject  Device,  which  is  particularly  described 
as  a  black  and  red  USB  drive  with  a  white  label  that  says  “Tracking  #:  180208140208.”  That  is, 
the  Subject  Device  contains  the  emails  and  other  content  information  obtained  pursuant  to  the  SCO 
Warrants,  less  any  emails  that  were  screened  and  removed  by  the  SCO’s  privilege  team. 

7.  The  Subject  Device  is  presently  located  in  the  Southern  District  of  New  York. 

C.  The  Subject  Offenses 

8.  The  affidavits  in  support  of  the  SCO  Warrants  describe  evidence  of  several 
different  courses  of  conduct  by  Cohen,  including,  among  other  things,  false  statements  to  financial 
institutions  relating  to  the  purpose  of  an  account  he  opened  in  the  name  of  Essential  Consultants 
LLC  and  the  nature  of  funds  flowing  into  that  account,  and  activities  undertaken  by  Cohen  on 
behalf  of  certain  foreign  persons  or  foreign  entities  without  having  registered  as  a  foreign  agent. 
The  SCO  Warrants  accordingly  define  the  evidence  to  be  seized  by  reference  to  subject  offenses 

^  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  firom  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 
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and  specific  categories  of  information  related  to  these  courses  of  conduct.  The  subject  offenses  in 


the  SCO  Warrants  are  summarized  as  follows: 


Exhibit 

Warrant 

Subiect  Offenses  in  Prior  Warrant 

A 

First  Cohen  Gmail 
Warrant 

18  U.S.C.  §§  1014  (false  statement  to  financial  institution),  1956  (money 
laundering),  95 1  (acting  as  an  unregistered  foreign  agent),  and  22  U.S.C. 
§§611  etseq.  (Foreign  Agents  Registration  Act  f  TARA’’)) 

B 

Second  Cohen  Gmail 
Warrant 

18  U.S.C.  §§  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (bank  fraud),  1956  (money  laundering),  951  (acting  as  an 
unregistered  foreign  agent),  and  22  U.S.C.  §§611  etseq,  (FARA) 

c 

Cohen  MDCPC  Warrant 

18  U.S.C.  §§  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (banlc  fraud),  1956  (money  laundering),  951  (acting  as  an 
um'egistered  foreign  agent),  and  22  U.S.C.  §§611  etseq.  (FARA) 

9.  Based  on  my  participation  in  this  investigation,  including  my  review  of  documents 
obtained  pursuant  to  subpoena  and  court  order,  my  conversations  with  witnesses  and  review  of 
reports  of  conversations  with  witnesses,  and  my  review  of  publicly  available  information,  I  have 
learned  of  additional  conduct  by  Cohen,  described  below,  which  was  not  described  in  the  affidavit 
seeking  the  First  Cohen  Gmail  Warrant  and  was  described  briefly  in  the  affidavits  seeking  the 
Second  Cohen  Gmail  Warrant  and  the  Cohen  MDCPC  Warrant.^ 

10.  I  am  therefore  requesting  authority  to  expand  the  search  of  the  non-privileged  e- 
mads  obtained  pursuant  to  the  SCO  Warrants,  as  contained  on  the  Subject  Device,  for  evidence 
related  to  this  additional  conduct.  As  set  forth  below,  in  addition  to  the  categories  of  evidence 
already  described  in  the  SCO  Warrants,  there  is  probable  cause  to  believe  that  the  Subject  Device 
contains  evidence  of  violations  of  1 8  U.S.C.  §  371  (conspiracy  to  defraud  the  United  States),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud)  (collectively,  the  “Subject  Offenses”),  related  to  the  additional  conduct  described 
below.^ 


^  I  do  not  base  this  application  on  my  review  of  emails  obtained  pursuant  to  the  SCO  Warrants. 

^  The  SCO  Warrants  cite  many  of  the  same  statutes  as  subject  offenses  and  describe  categories  of 
information  that  likely  encompass  evidence  of  the  additional  conduct  described  herein. 
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II.  Probable  Cause  Regarding  the  Subject  Offenses 

1 1 .  Together  with  this  application,  I  am  submitting  an  application  for  a  search 
warrant,  pursuant  to  18  U.S.C.  §  2703,  for  all  content  and  other  information  associated  with  (a) 
the  Cohen  Gmail  Account,  for  the  time  period  November  14,  2017  to  the  present;  (b)  the  Cohen 
MDCPC  Account,  for  the  time  period  November  14,  2017  to  the  present;  and  (c)  three  other 
email  accounts.  The  affidavit  in  support  of  this  application  is  attached  as  Exhibit  D  (the 
“Accompanying  Affidavit”),  and  is  incorporated  by  reference  as  if  fully  set  forth  herein. 

12.  As  set  forth  in  the  Accompanying  Affidavit,  there  is  probable  cause  to  believe  that 

Cohen  has  made  affirmative  misrepresentations  in  and  omitted  material  information  from  financial 
statements  and  other  disclosures  that  Cohen  provided  to  multiple  banks  in  connection  with  a 
transaction  intended  to  relieve  Cohen  of  approximately  $22  million  in  debt  he  owed  on  taxi 
medallion  loans  from  the  banks.  As  set  forth  in  detail  in  the  Accompanying  Affidavit,  in  these 
financial  statements,  and  in  his  oral  and  other  written  statements  to  these  banks,  Cohen  appears  to 
have  (i)  intentionally  omitted  cash  assets  that  he  began  receiving  in  2017  from  new  consulting 
work;  (ii)  significantly  understated  his  total  holdings  of  cash  and  cash  equivalents;  and  (iii)  failed 
to  inform  the  banks  from  which  he  was  seeking  debt  relief  that  he  had  agreed  to  make  a  $3.8 
million  cash  payment  to  a  third  party,  in  connection  with 

acquisition  of  the  taxi  medallions  securing  Cohen’s  debt.  By  making  these  misrepresentations  and 
material  omissions,  Cohen  avoided  making  monthly  payments  on  his  loans,  and  attempted  to  and 
has  secured  proposed  agreements  from  the  banks  to  relieve  him  of  certain  repayment  obhgations 
worth  millions  of  dollars. 


Nevertheless,  in  an  abundance  of  caution,  I  am  seeking  explicit  authorization  to  search  the  Subject 
Device  for  evidence  of  this  additional  conduct. 
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13.  As  noted  above,  the  Accompanying  Affidavit  seeks  email  content  for  the  Cohen 
Gmail  Account  and  the  Cohen  MDCPC  Account  for  the  period  from  November  14,  2017  to  the 
present,  and  therefore  establishes  probable  cause  that  a  search  of  the  email  content  from  that  time 
period  will  reveal  evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses.  As  set  forth 
below,  the  Accompanying  Affidavit  also  establishes  probable  cause  to  believe  that  a  search  of 
the  Subject  Device  {i.e.,  the  non-privileged  emails  from  the  earlier  time  periods  covered  by  the 
SCO  Warrants)  will  similarly  reveal  evidence,  fruits,  and  instrumentalities  of  the  Subject 
Offenses."^  For  example,  as  described  in  the  Accompanying  Affidavit: 

a.  In  or  about  December  2014,  Sterling  National  Bank  (“Sterling”)  agreed  to 
lend  approximately  $22  million  to  Cohen’s  medallion  companies.  See  Accompanying  Affidavit 
1 14(c). 


b.  In  or  about  September  2015,  Cohen  began  pushing  Sterling  for  a  reduction 
in  his  monthly  payments.  See  id.  f  14(e). 

c.  In  or  about  October  20 1 6,  Cohen  told  a  Sterling  employee  (“Sterling 

I,  who 


Employee- 1”)  that  he  had  a  potential  buyer  of  his  taxi  medallions,  namedi 
would  agree  to  assume  Cohen’s  debt  with  Sterling  (and  Melrose  Credit  Union,  the  participating 
bank).  See  id.  f  14(g).  Negotiations  of  the  potential  taxi  medallion  transaction  then  followed  for 
more  than  a  year.  See  id.  TITj  14(g)-(q). 


I 


As  noted,  the  Subject  Device  contains  email  content  for  the  Cohen  Gmail  Account  from  the 
period  of  June  1, 2015  to  November  13,  2017,  and  email  content  for  the  Cohen  MDCPC  Account 
for  the  period  of  March  2017  to  November  13,  2017. 
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d.  On  or  about  February  22,  2017,  the  Cohen  Gmail  Account^  sent  an  email  to 
a  Sterling  employee  (“Sterling  Employee-2”)  stating  that  he  “agreed  to  pay  down  1  million  from 
the  loan  amount.”  See  id.  ^  14(g). 

e.  On  or  about  June  8,  2017,  Cohen  emailed  Sterling  Employee-1  from  the 
Cohen  Gmail  Account,  attaching  a  Sterling  personal  financial  statement  form  that  had  been  filled 
out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1, 2017  (the  “May 
2017  Financial  Statement”),  that  was  also  attached.  See  id.  14(i). 

f.  On  or  about  October  5,  2017,  Cohen,  using  the  Cohen  Gmail  Account,  re¬ 
sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October  6, 
2017,  Cohen,  using  the  Cohen  Gmail  Account,  emailed  Sterling  Employee-2  a  statement  of 
financial  condition,  dated  September  30,  2017  (the  “September  2017  Financial  Statement”).  See 
id.  Tf  14(m).  The  September  2017  Financial  Statement  omitted  assets  that  Cohen  held  in  certain 
bank  accounts  and  substantially  understated  his  available  cash  and  cash  equivalents.  See  id.  TfTf 
19-20. 

g.  It  appears  that  Cohen  set  up  the  Cohen  MDCPC  Account  to  receive  emails 
he  was  previously  receiving  at  the  Cohen  Gmail  Account.  On  or  about  May  5, 2017,  Cohen  sent 
an  email  from  the  Cohen  MDCPC  Account  to  a  bhnd  copy  list  of  recipients,  stating  that  “[d]ue  to 
the  overwhelming  volume  of  phone  calls  and  emails  coming  iato  my  previous  cellular  number 
and  e-mail  address,  I  have  elected  to  create  for  Clients  Only  the  following.  Kdndly  use  this  new 


®  As  noted  in  n.2,  supra,  I  do  not  base  this  application  on  my  review  of  emails  obtained  pursuant 
to  the  SCO  Warrants.  Where  the  content  of  emails  sent  from  or  received  by  the  Cohen  Gmail 
Account  and/or  the  Cohen  MDPC  Account  are  described  herein,  my  description  is  based  on  copies 
of  these  emails  produced  by  third  parties  pursuant  to  subpoena  or  otherwise. 
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information  for  all  fnture  contact  and  communications.”  The  signature  line  on  the  email  listed 
the  Cohen  MDCPC  Account  as  the  new  email  address.  See  id.  f  26. 

h.  Based  on  my  review  of  header  information  obtained  by  court  order,  I  have 
learned  that,  on  approximately  eight  occasions  in  August  and  September  2017,  while  Cohen, 

j,  and  l^^^^^^^were  communicating  about  a  term  sheet  for  the 
Cohen-’^^|^^|taxi  medallion  transaction,  the  Cohen  MDCPC  Account  sent  or  received 
emails  from  including  emails  on  which  Sterling  employees  were  copied.  On  or  about 
August  22,  2017,  Cohen  also  used  the  Cohen  MDCPC  Account  to  send  an  email  to  Sterling 
Employee-1.  See  id.  T|  27(a). 

i.  Based  on  my  review  of  header  information  obtained  by  court  order,  I  have 

learned  that  on  or  about  September  1,  2017 — at  or  around  the  time  the  Cohen 

were  negotiating  a  term  sheet: — ^the  Cohen  MDCPC  Account  sent  or  received  eight  emails  to  or 

See  id.  ^  25(b). 

14.  Therefore,  there  is  probable  cause  to  believe  that  a  search  of  the  Subject  Device 
will  reveal  evidence,  fruit  and  instrumentalities  of  the  Subject  Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  involving  Sterling, 
Melrose,  and/or  taxi  medallions; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan, 

proposal,  or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to  and/or 

entities  associated  with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  estabhsh 
the  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  - 
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who  communicated  with  the  Cohen  Gmail  Account  and/or  the  Cohen  MDCPC  Account  about  any 
plan  or  proposal  or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest 
in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to 
and/or  entities  associated  with  him; 

d.  Communications  between  the  Cohen  Gmail  Account  and/or  the  Cohen 
MDCPC  Account  and  Jeffrey  Getzel  relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or 
finances; 

e.  Evidence  indicating  the  Cohen  Gmail  Account  and  the  Cohen  MDCPC 
Account  owner’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

III.  Procedures  for  Searching  ESI 
A.  Review  of  ESI 

15.  Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and 
agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related 
proceedings,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under 
government  control)  will  review  the  ESI  contained  on  the  Subject  Device  for  information 
responsive  to  the  warrant. 

16.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  methods  to 
locate  evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses,  including  but  not  limited  to 
undertaking  a  cursory  inspection  of  all  emails  contained  on  the  Subject  Device.  This  method  is 
analogous  to  cursorily  inspecting  all  the  files  m  a  file  cabinet  in  an  office  to  determine  which  paper 
evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other  methods  as 
well,  particularly  including  keyword  searches,  I  know  that  keyword  searches  and  similar  methods 
are  typically  inadequate  to  detect  all  information  subject  to  seizure.  As  an  initial  matter,  keyword 
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searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated  with  emails, 
including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store  data  as 
searchable  text.  Moreover,  even  as  to  text  data,  keyword  searches  cannot  be  relied  upon  to  capture 
all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of  the  umque 
words  or  phrases  that  investigative  subjects  will  use  in  their  commumcations,  and  consequently 
there  are  often  many  communications  in  an  account  that  are  relevant  to  an  investigation  but  that 
do  not  contain  any  keywords  that  an  agent  is  likely  to  search  for. 

IV.  Conclusion  and  Ancillary  Provisions 

17.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachment  A  to  this  affidavit  and  to  the  Search  and  Seizure 
Warrant. 

18.  In  Ught  of  the  confidential  nature  of  the  continuing  investigation,  and  for  the 
reasons  more  fully  set  forth  in  the  Accompanying  Affidavit,  I  respectfully  request  that  this  affidavit 
and  all  papers  submitted  herewith  be  maintained  under  seal  until  the  Court  orders  otherwise. 


Special  Agent,  US  AO 


Sworn  to  before, ihie. on!  (/  /  ,  '  ' 
28th  day  of  Febfui^y,;2()l8',  . 


)  1 
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Attachment  A 

I.  Device  to  be  Searched 

The  device  to  be  searched  (the  “Subject  Device”)  is  described  as  a  black  and  red  USB  drive 
with  a  white  label  that  says  “Tracking  #;  1 80208140208”,  which  contains  emails  and  other  content 
information  obtained  pursuant  to  the  three  search  warrants,  numbered  17-mj-00503,  17-mj-00855 
and  17-mj-00854,  obtained  by  the  Special  Counsel’s  Office  (“SCO”),  less  the  emails  that  were 
screened  and  removed  by  the  SCO’s  privilege  team. 

II.  Review  of  ESI  on  the  Subject  Devices 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
-aud-depending-ou  thnnature  oTthe-ESI-and-the-status-ofthe  investigatiomand  related-proceedings,- 
attomeys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under  government  control) 
are  authorized  to  review  the  ESI  contained  on  the  Subject  Device  for  evidence,  fruits,  and 
instrumentalities  of  one  or  more  violations  ofl8U.S.C.  §371  (conspiracy  to  defraud  the  United 
States),  1005  (false  banlc  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire 
fraud),  and  1344  (bank  fraud)  (collectively,  the  “Subject  Offenses”),  as  listed  below: 

a.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Mefrose  Credit  Union,  and/or  taxi  medallions; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 


agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to  and/or 

entities  associated  with  him; 

c.  The  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the 
person(s)  —  who  communicated  with  ^^^^^^^|^gmail.com  and/or 
“Subject  Accounts”)  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 


associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  tol 


|and/or  entities  associated  with  him; 


d.  Communications  between  the  Subject  Accounts  and  Jeffrey  Getzel  relating  to 


Michael  D.  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances; 
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e. 


Evidence  indicating  the  owner  of  the  Subject  Accounts’  intent  as  it  relates  to  the 


Subject  Offenses  under  investigation. 
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Exhibit  A 
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AO  93  (Rev.  11/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 


file, 


JUL  24  20i? 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  ^ 

INFORMATION  ARSOni^gn  WITH  THE  EMAIL  ) 

ACCOUNT  ^^^^^■@GMAIL.COM  ) 


) 


asej  i;i7-~mj'"00503 

.ssianeaTo:Howen,BerylA. 

.ssfin  Date 7/18/2017 


SEARCH  AND  SEIZURE  WARRANT 


Tor'  '  Any  authorized  law  enfbfcemehrt^  '  "  . . .  . 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  Northern  District  of  _ California 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)". 


I 


See  Attachment  A. 


I  find  that  the  affidavit(s)>  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized): 

See  Attachment  B, 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  _ August  1 ,  2017  ^>70/  to  exceed  14  days) 

^  in  the  daytime  6:00  a,m.  to  10:00  p.m.  □  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  propeity  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 

as  required  by  law  and  promptly  return  this  warrant  and  inventoiy  to  _ _ Hon,  Beryl  A.  Howell  _  , 

(United  States  Magistrate  Judge ) 

□  Pursuant  to  18  U.S.C.  §  SlOSaCb),  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C* 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

□  for _ (not  to  exceed  SO)  □  until,  the  facts  justifying,  the  later  specific  date  of  _ _  _ 


Date  and  time  issued: 


Judge 's  signature 


City  and  state:  Washington,  DC  Hon.  Beryl  A.  Howell,  Chief  U.S.  District  Judge 

Printed  name  and  title 
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AO  93  (Rev  1 1/13)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  nnet  time  warrant  executed: 

7jih/'2^n  %\\ep^ 

Copy  of  warrant  and  inventory  left  with; 

G-oofi^Ct_  Utq^l 

. ' .  ^  . " 

Inventory  made  in  the  presence  of: 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized; 


Dr^ifal  FiL-s  ■.  \ise>c>e<] 

i  \^oe>6^  -  'Z0]7oy]q~  ) 

. 


filed 

JUL  2 1  2017 

Clerk,  u.s.  District  and 
Bankruptcy  Courts 


Ccrtificiition 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  judge. 

Dale; 


J 
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I 

'  ATTACHMENT  A  j 

This  warrant  applies  to  information  associated  with  the  Google  Mail  Account 
^^^^^^|@gmail.com  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated  by 
Google,  a  company  headquartered  at  1 600  Amphitheatre  Parkway,  Mountain  View,  CA  94043, 
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ATTACHMENT  B 


I.  Information  to  be  disclosed  by  Google 

To  the  extent  that  the  information  described  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  the  Google  (hereinafter  “the  Provider”),  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
aeeeunfeerfidentifier-iisteddmAttachmentrA^  _ _ _  _ ------ 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
•session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
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during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 

f.  All  search  history  or  web  history; 

g.  All  records  indicating  the  services  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  login  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 

k.  All  telephone  or  insti'ument  numbers  associated  with  the  Account  (including  MAC 
addresses.  Electronic  Serial  Numbers  (“ESN”),  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

IL  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution)  and  18  U.S.C.  §  1956  (money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an 
unregistered  foreign  agent)  and  the  Foreign  Agents  Registration  Act  (“FARA”),  22  U.S.C.  §  61 1 
et  seq.,  involving  Michael  Dean  Cohen  and  occurring  on  or  after  January  1,  2016,  including,  for 
each  account  or  identifier  listed  on  Attachment  A,  information  pertaining  to  the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  records,  documents,  and  other  files  involving  Bo  and  Abe  Realty, 
LLC; 

c.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
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account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 

d.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

e.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 

'^'^^^^T^reignprincipalsr^''^^^”  =====:  . 

f.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 
the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating 
to  the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

h.  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 
that  help  reveal  the  whereabouts  of  such  person(s);  and 

ii  The  identity  of  any  person(s) — including  records  that  help  reveal  the  whereabouts 
of  the  person(s) — ^who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals. 
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Exhibit  B 
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AO  93  (Rev.  1 1/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 

In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  he  searched 
or  Identify  the  parson  by  name  and  address) 

WITH  THE  EMAIL 
@(3MAILC(jM 


SEARCH  AND  SEIZURE  WARRANT 

To;  ^  Tuny^authof izeh  Im  enfoiwm®  oificef ~  ™  ^ ~ 

An  application  by  a  federal  law  enforcement  officer  or  an  . attorney  for  the  goveilunent  requests  the  search 
of  the  following  person  or  property  located  in  the  Northern  District  of  California 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  Ideation)^ 


IN  FORMATION^gggoi^Tgn 

ACObUNT^^^^^I 


) 

)  Case:  1 : 1 7-mj~00855 

)  Assigned  To  :  Chief  Judge  Howell,  Beryl  A. 
^  Assign.  Date  ;  11/13/2017 

\  Description:  Search  and  Seizure  Warrant 


See  Attachment  A* 


I  find  that  the  affidavitCs),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized)'. 


See  Attachment  B. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  November  20,  2017  (not  to  exceed  14  days) 

^  ill  the  daytirxie  6;00  to  10;00  p.'m.  □  at  any  time  In  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  wan'ant  and  a  receipt  for  the  property  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken* 

The  officer  executing  this  waitaht,  or  an  officer  present  during  the  execution  of  the  wartaiit,  must  prepare  an  Invehtory 
as  required  by  law  and  promptly  return  this  Warrant  and  inventoiy  to _ _ Hon.  Beryl  A.  Howell _ * 

(United  States  Magistrate  Judge) 

□  Pursuant  to  1 8  U^SU.  §  3 1 03 a(b),  1  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.G. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

□  for  _ days  (not  to  exceed  W)  □  Until,  the  facts  justifying,  the  later  specific  date  of  _ . 

Judge 's  signature 

Hon.  Beryl  A.  Hpvveli,  Chief  U.S.  District  Judge 

Printed  name  and  title 


Date  and  time 


Issued:  /r/vj/ 


City,  aild  state: 


Washington,  DC 
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Ad  93  (Rfiv.  1 1/13)  Search  and  Seizure  Warrant  (Page .2) 


Return 

Case  No.: 

Date  and  time  warrant  executed; 

Copy  of  warrant  and  inventory  left  with: 

Inventoiy  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  perjury  tliat.this  inyentoiy  is  correct  and  was  returned  along  with  the  original  wairant  to  the 
designated  judge. 


Date:  _ _  _ 

Executing  officer 's  signature 


Printed  name  and  title 
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ATTACHMENT  A 

This  warrant  applies  to  information  associated  with  the  Google  Mail  Account 
l^gmail.com  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated 
by  Google,  a  company  headquartered  at  1 600  Amphitheatre  Parkway,  Mountain  View,  CA  94043. 
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ATTACHMENT  B 

I.  Information  to  be  disclosed  by  Google 

To  the  extent  that  the  information  described  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  the  Google  (hereinafter  “the  Provider”),  regardless  of  whether  sueh 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
account  or  identifier  listed  in  Attachment  A: 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  dr'aft  emails,  the  source  arid 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  infonnation  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  tlie  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  DP  addresses  associated  with 
session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 
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f.  All  search  history  or  web  history; 

g.  All  records  indicating  the  services  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  login  IP  address  or  browser  cookie  vvith 
the  accounts; 

i.  All  cookies*  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 
and 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
addresses.  Electronic  Serial  Numbers  (“ESN”),  Mobile  Electronic  Wentily 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Seiwices  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEl”). 

n.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution),  18  U.S.C.  §  1343  (wire  fraud),  18  U.S.C,  §  1344  (bank  fraud),  and  18  U.S.C.  §  1956 
(money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an  unregistered  foreign  agent)  and  the 
Foreign  Agents  Registration  Act  (“FARA”),  22  U.S.C.  §  61 1  et  seq.,  involving  Michael  Dean 
Cohen  and  occurring  on  or  after  June  1,  2015,  including,  for  each  account  or  identifier  listed  on 
Attachment  A,  information  pertaining  to  the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  recoids,  documents,  and  other  flies  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  pr  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  Or  the 
purpose  or  nature  of  any  financial  transactions  involving  (hat  financial  institution; 
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c.  Records  of  any  funds  dr  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

d.  Communications,  records,  documentSj  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 
foreign  principals; 

e.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 
lhe^ebpaphic“ahd'ehfdholdgiMl  comtexfdfaccouhfaGce^usfoaiideventsfelafing^ 
to  the  crimes  under  investigation  and  to  the  account  owner; 

f.  Evidence  indicating  the  account  owner’s  state  of  milid  as  it  relates  to  the  crimes 
under  investigation; 

g.  The  identity  of  foe  person(s)  who  created  or  used  the  account,  including  records 
that  help  reveal  the  whereabouts  of  such  person(s);  and 

h.  The  identity  of  any  person(s) — ^including  records  that  help  reveal  the  whereabouts 
of  the  person(s) — ^who  communicated  with  foe  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals, 

in.  Review  Protocols 

Review  of  the  items  described  in  Attachment  A  and  Attachment  B  shall  be  conducted 
pursuant  to  established  procedures  designed  to  colleot  evidence  in  a  manner  consistent  with 
professional  responsibility  requirements  conceraing  the  maintenance  of  attorney-client  and  other 
operative  privileges.  When  appropriate,  the  procedures  shall  include  use  of  a  designated  “filter 
team,”  separate  and  apart  fi‘om  the  investigative  team,  in  order  to  address  potential  privileges. 
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AQ  93  (Rev.  I  I/I  3)  Search  and  Seizure  Warrant 


United  States  District  Court  . .  . 

for  the 

District  of  Columbia 

) 

)  Case:  1;17-mj-00854 
)  Assigned  To  :  Chief  Judge  Howell,  Beryl  A. 
)  Assign.  Date  :  11/13/2017 
^  Description:  Search  and  Seizure  Warrant 


SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 

An  application  by  a  fedetal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Northern _  District  of  _  California 

(identify  the  person  or  describe  the  property*  to  be  searched  and-give  its  }ocation)\ 

See  Attachment  A. 


tn  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be. searched 
or  identify  the  person  by  name  and  address) 

IWPORM^TTO^SSO^TED  with  the  account 

IS  STORED  AT  THE 

^^"■PREMISES  OF  1&1  INTERNET,  INC. 


I  find  that  the  affidavitCs),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized): 

See  Attachment  B, 


YOU  ARE  commanded  to  execute  this  waiTant  on  or  before  N ovember  20,  2Q 1 7  (not  to  exceed  days) 

^  in  the  daytime  6:Q0  a,m.  to  10:00  p,m.  Oat  any  time  in  the  day  or  night  because  good  cause  has  been  established 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  pi^operty  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  wairant,  must  prepare  an  inventory 

a$  required  by  taw  and  promptly  return  this  wairant  and  inventory  to _ _ Hon^  .Beryl  A,  Howell _ , 

(United  States  Magistrate  Judge) 

□  Pursuant  to  18  U.S.G.  §  3103a(b),  I  find  that  immediate  notification  may  have  an  adverse  result. listed  in  18  U.S,C. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
prop^ily,  will  be  searched  or  seized  (check  the  appropriate  box) 

O  for _ dixys  (not  to  exceed  30)  □  until,  the  facts  justitying,  the  later  Specific  date  of  _ . 


Date  and  time  issued: 


City  and -state: 


Judge  *s  signature 

Hon.  Beryl  A:  HoWell,  Chief  U.S.  District  Judge 

Printed  name  and  tide 
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AO  93  (Rev.  1 1/13)  Search  and  Seizure  Warrant  (Page 2) 
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ATTACHMENT  A 

This  warrant  applies  to  information  associated  with  the  eMail  ^^^^^^^^^|that 
is  stored  at  premises  owned,  maintained,  controlled,  or  operated  by  l&l  Internet,  hic.  ("l&l”),  an 
electronic  communication  and/or  remote  computing  service  provider  headquartered  in  Sunnyvale, 
California. 
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ATTACHMENT  B 

I,  Information  to  be  disclosed  by  l&l 

To  the  extent  that  the  infoiTnation  described  in  Attachment  A  is  within  the  possession, 
custody,. or  control  of  the  l&l  (hereinafter  “the  Provider”),  fegardless  of  whether  such  information 
is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any  emails, 
records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the  Provider,  the 
Provider  is  required  to  disclose  the  following  information  to  the  government  for  each  account  or 
identifier  listed  in  Attachment  A: 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  die  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  ofservice,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  .connecting; 
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All  search  history  or  web  history; 

All  records  indicating  the  sei-vices  available  to  subscribers  of  the  accounts; 

All  usernames  associated  with  or  sharing  a  logiii  IP  address  or  browser  cookie  vvith 
the  accounts; 

All  cookies,  including  third-party  cookies,  associated  with  the  user; 

All  records  that  are  associated  with  tlie  machine  cookies  associated  with  the  user; 
and 

All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
addresses,  Electronic  Serial  Numbers  (“ESN”),  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

n.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution),.! 8  U.S.C.  §  1343  (wire  fraud),  18  U.S.C.  §  1344  (bank  fraud),  and  18  U.S.C.  §  1956 
(money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an  unregistered  foreign  agent)  and  the 
Foreign.  Agents  Registration  Act  (“FARA”),  22  U.S.C,  §  611  et  seq.,  involving  Michael  Dean 
Cohen,  including,  for  each  account  or  identifier  listed  on  Attachment  A,  information  pertaining  to 
the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business,  or  entity  associated  with  an 
account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 


f. 

g> 

h. 

i. 

j- 

k. 
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c.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

d.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 
foreign  principals; 

e.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 
the  gebgraphic  and  chronological  context  of  account  access,  use,  and  events  relating 
to  the  crimes  under  investigation  and  to  the  account  owner; 

f.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

g.  ■  The  identity  of  the  person(s)  who  created  or  used  the  accourit,  including  records 

that  help  reveal  the  whereabouts  of  such  person(s);  and 

h.  The  identity  of  any  person(s) — including  records  that  help  reveal  the  whereabouts 
of  the  person(s) — ^who  conimunicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  goyernment,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals, 

III.  Review  Protocols 

Review  of  tlie  items  described  in  Attachment  A  and  Attachment  B  shall  be  conducted 
pursuant  to  established  procedures  designed  to  collect  evidence  in  a  manner  consistent  with 
professional  responsibility  requirements  concerning  the  maintenance  of  attorney-client  and  other 
operative  privileges.  When  appropriate,  the  procedures  shall  include  use  of  a  designated  “filter 
team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address  potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISNIICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
^^^^^^^dth  the  Email  Accounts 
^^^^^^|@gmail.com. 

TO  BE  FILED  UNDER  SEAL 

AGENT  AFFIDAVIT 

Maintained 

Premises  ControlledbyGoo^eNnc., 
the  Email  Accoxmt^^^^^^^^l 

Maintained  at  Premises  Controlled  by 
■  -  Oath,  Tncij-and  the-Email  Account 

maintained 

Premises  Controlled  by  1  &  1  Internet, 

fric.,  USAO  Reference  No. 

2018R00127 

Agent  Affidavit  in  Support  of  Application  for  a  Search  Warrant 
for  Stored  Electronic  Communications 


STATE  OF  NEW  YORK  ) 

)  ss. 

COUNTY  OF  NEW  YORK  ) 

Special  the  United  States  Attorney’s  Office  for  the  Southern 

District  of  New  York,  being  duly  sworn,  deposes  and  states; 

L  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern  District 
of  New  York  (the  “USAO”).  I  have  been  a  Special  Agent  with  the  USAO  since  August  2016.  I 
previously  served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector 
General  from  May  2011  to  August  2016.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
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of  financial  crimes,  including  frauds  on  financial  institutions.  I  also  have  training  and  experienee 
exeeuting  seareh  warrants,  including  those  authorizing  the  search  of  email  accounts. 

B.  The  Provider,  the  Subject  Account  and  the  Subject  Offenses 

2.  I  make  this  affidavit  in  support  of  an  application  for  a  search  warrant  pursuant  to  18 
U.S.C.  §  2703  for  all  content  and  other  information  associated  with  the  email  accounts 
|;^gmail.com  (the  “Cohen  Account”),  (the  “MDCPC 

j^coimt”)^^^M@gTriail.com  (the  I  [Accoimf fthe 


Account”),  and 


“Subject  Accounts”).  The  Cohen  Account, 


Account”)  (collectively,  the 
Account,  anc 


Account  are  maintained  and  controlled  by  Google,  Inc.,  headquartered  at  1600  Amphitheatre 
Parkway,  Mountain  View,  California  94043  (“Google”),  the  MDCPC  Account  is  maintained  and 
controlled  by  1  &  1  Internet,  Inc.,  headquartered  at  701  Lee  Road,  Suite  300,  Chesterbrook, 
Pennsylvania  19087  (“1  &  1”),  and  the^^^|kccount  is  maintained  and  controlled  by  Oath,  Inc., 
22000  AOL  Way,  Dulles,  Virginia  20166  (“Oath”)  (together,  the  “Providers”).  The  information 
to  be  searched  is  described  in  the  following  paragraphs  and  in  Attachments  A,  B,  C  and  D  to  the 
proposed  warrants. 

3.  As  detailed  below,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  contain 
evidence,  fruits,  and  instrumentalities  of  violations  of  18  U.S.C.  §  371  (conspiracy  to  defraud  the 
United  States),  1005  (false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud)  (collectively,  the  “Subject  Offenses”).  The  Target  Subjects  of 
this  investigation  are  MICHAEL  COHEN  (“Cohen”)  and  others  known  and  unknown.  This 
affidavit  is  based  upon  my  personal  Icnowledge,  my  review  of  documents  produced  pursuant  to 
grand  jury  subpoenas  and  prior  search  warrants,  my  review  of  interview  reports  prepared  by  other 
law  enforcement  officers,  and  my  conversations  with  other  law  enforcement  officers,  as  well  as 
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my  training  and  experience  concerning  the  use  of  email  in  criminal  activity.  Because  this  affidavit 
is  being  submitted  for  the  limited  purpose  of  establishing  probable  cause,  it  does  not  include  all 
the  facts  I  have  learned  during  my  investigation.  Where  the  contents  of  documents  and  the  actions, 
statements,  and  conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in 
part,  except  where  otherwise  indicated. 

C.  Services  and  Records  of  the  Provider 

4.  1  have  learned  the  following  about  the  Providers: 

a.  The  Providers  offer  email  services  to  the  public.  In  particular,  Google  permits 

subscribers  to  maintain  email  accounts  under  the  domain  name  gmail.com.  Google  also  allows  a 
subscriber  to  maintain  email  accounts  under  any  domain  name  under  the  subscriber’s  control.  For 
example,  if  a  subscriber  controls  the  domain  name  Google  enables  the  subscriber 

to  host  any  email  address  rmder  this  domain  name  on  servers  operated  by  Google.  Oath  permits 
subscribers  to  maintain  email  accounts  under  the  domain  name  aol.com.  1  &  1  permits  subscribers 
to  maintain  email  accounts  under  any  domain  name  under  the  subscriber’s  control.  For  example, 
if  a  subscriber  controls  the  domain  name  1  &  1  enables  the  subscriber  to  host  any 

email  address  under  this  domain  name  on  servers  operated  by  1  &  1 .  A  subscriber  using  the 
Providers’  services  can  access  his  or  her  email  account  from  any  computer  cormected  to  the 
Internet. 

b.  The  Providers  maintain  the  following  records  and  information  with  respect  to  every 
subscriber  account: 

i.  Email  contents.  In  general,  any  email  (which  can  include  attachments  such 
as  documents,  images,  and  videos)  sent  to  or  from  a  subscriber’s  account,  or  stored  in  draft  form 
in  the  account,  is  maintained  on  the  Providers’  servers  unless  and  until  the  subscriber  deletes  the 
email.  If  the  subscriber  does  not  delete  the  email,  it  can  remain  on  the  Providers’  computers 
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indefinitely.  Even  if  the  subscriber  deletes  the  email,  it  may  continue  to  be  available  on  the 
Provider’s  servers  for  a  certain  period  of  time. 

ii.  Address  book.  The  Providers  also  allow  subscribers  to  maintain  the 
equivalent  of  an  address  book,  comprising  email  addresses  and  other  contact  information  of  other 
email  users. 

iii.  Subscriber  and  billing  information.  The  Providers  collect  and  maintain 
(typicall-y-unverified)-identifyingTnformatiomabout-each-Subscriber.-including.-for-example,-name, 
username,  address,  telephone  number,  and  alternate  email  addresses.  The  Providers  also  maintain 
records  concerning  the  date  on  which  the  account  was  created,  the  Internet  protocol  (“IP”)  address 
of  the  user  at  the  time  of  account  creation,  the  current  status  of  the  account  (e.g.,  active  or  closed), 
the  length  of  service,  and  the  types  of  services  utilized  by  the  subscriber.  Additionally,  for  paying 
subscribers,  the  Providers  maintain  records  of  the  subscriber’s  means  and  source  of  payment, 
including  any  credit  card  or  bank  account  number. 

iv.  Transactional  information.  The  Providers  also  typically  retain  certain 
transactional  information  about  the  use  of  each  account  on  its  system.  This  information  can  include 
records  of  login  {i.e.,  session)  times  and  durations  and  the  methods  used  to  coimect  to  the  account 
(such  as  logging  into  the  account  through  the  Providers’  website). 

V.  Customer  correspondence.  The  Providers  also  typically  maintain  records 
of  any  customer  service  contacts  with  or  about  the  subscriber,  including  any  inquiries  or 
complaints  concerning  the  subscriber’s  account. 

vi.  Search  history.  Google  and  Oath  also  typically  maintain  records  of  any 
search  history  or  web  history  associated  with  the  subscriber’s  account. 
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vii.  Associated  content.  Google  also  typically  maintains  content  and  records 
relating  to  the  following  applications  that  are  associated  with  its  e-mail  accounts:  (A)  “Google 
Docs,”  which  provides  document-editing  software  that  can  be  used  to  create,  share,  store,  and 
manage  documents  online;  (B)  “Google  Drive,”  which  enables  users  to  store  files  on  Google 
servers,  where  they  can  be  accessed  remotely  by  the  user  and  others;  and  (C)  “Gchat”  or  “Instant 
Messenger,”  which  provides  a  chat  interface  through  which  users  can  communicate  with  each 

other-in-reaLtime _ ^Oath-also-typically-maintains-  content  and-records  relatingAo_A-QL-instant 

message,  which  provides  a  chat  interface  through  which  users  can  communicate  with  each  other 
in  real  time. 

viii.  Preserved  and  backup  records.  The  Providers  also  maintain  preserved 
copies  of  the  foregoing  categories  of  records  with  respect  to  an  account,  for  at  least  90  days,  upon 
receiving  a  preservation  request  from  the  Government  pursuant  to  18  U.S.C.  §  2703(1).  The 
Providers  may  also  maintain  backup  copies  of  the  foregoing  categories  of  records  pursuant  to  its 
own  data  retention  policy. 

D.  Jurisdiction  and  Authority  to  Issue  Warrant 

5.  Pursuant  to  1 8  U.S.C.  §§  2703(a),  (b)(1)(A)  &  (c)(1)(A),  the  Government  may  require 
a  provider  of  an  electronic  communications  service  or  a  remote  computing  service,  such  as  the 
Providers,  to  disclose  all  stored  content  and  all  non-content  records  or  other  information  pertaining 
to  a  subscriber,  by  obtaining  a  warrant  issued  using  the  procedures  described  in  the  Federal  Rules 
of  Criminal  Procedure. 

6.  A  search  warrant  under  §  27 03  may  be  issued  by  “any  district  court  of  the  United  States 
(including  a  magistrate  judge  of  such  a  court)”  that  “has  jurisdiction  over  the  offense  being 
investigated.”  18  U.S.C.  §  2711(3)(A)(i). 
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7.  When  the  Government  obtains  records  under  §  2703  pursuant  to  a  search  warrant,  the 
Government  is  not  required  to  notify  the  subscriber  of  the  existence  of  the  warrant.  18  U.S.C. 
§  2703(a),  (b)(1)(A),  (c)(2)  &  (3).  Additionally,  the  Government  may  obtain  an  order  precluding 
the  Provider  from  notifying  the  subscriber  or  any  other  person  of  the  warrant,  for  such  period  as 
the  Court  deems  appropriate,  where  there  is  reason  to  believe  that  such  notification  will  seriously 
jeopardize  an  investigation.  1 8  U.S.C.  §  2705(b). 

==^=dEh=PFioFAi:ppIiGations===  - = - r===r-r=  ^ - —  - — 

8.  On  or  about  July  1 8, 2017,  in  connection  with  an  investigation  being  conducted  by  the 
Office  of  the  Special  Counsel  (“SCO”),  the  Federal  Bureau  of  Investigation  (“FBI”)  sought  and 
obtained  from  the  Honorable  Beryl  A.  Howell,  Chief  United  States  District  Judge  for  the  District 
of  Columbia,  a  search  warrant  for  emails  in  the  Cohen  Account  sent  or  received  between  January 
1,  2016  and  July  18,  2017.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  from 
Judge  Howell  search  warrants  for  emails  in  the  Cohen  Account  sent  or  received  between  June  1, 
2015  and  November  13,  2017,  and  emails  in  the  MDCPC  Account  sent  or  received  between  the 
opening  of  the  account  and  November  13,  2017.  The  SCO  has  since  referred  certain  aspects  of 
their  investigation  into  Cohen  to  the  USAO,  which  is  working  with  the  FBI’s  New  York  Field 
Office.  As  part  of  that  referral,  the  SCO  provided  the  USAO  with  emails  and  other  content 
information  obtained  pursuant  to  the  search  warrants  executed  by  the  SCO,  which  had  already 
been  reviewed  for  privilege.^  As  discussed  below,  this  affidavit  is  based  in  part  on  my  review  of 


^  In  an  abundance  of  caution,  in  a  separate  application  the  USAO  has  sought  authorization, 
pursuant  to  Fed.  R.  Crim.  P.  41 ,  to  review  the  emails  obtained  pursuant  to  the  Prior  Cohen  Account 
Warrants  for  evidence  related  to  certain  additional  conduct  that  was  not  the  focus  of  the  Prior 
Cohen  Account  Warrants.  The  emails  obtained  from  the  Prior  Cohen  Account  Warrants  that  relate 
to  that  additional  conduct  do  not  form  a  basis  for  the  instant  application. 
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responsive  materials  produced  pursuant  to  the  July  1 8  and  November  13, 2017  warrants  (the  “Prior 
Cohen  Account  Warrants”). 

9.  On  or  about  November  7, 20 1 7,  and  January  4,  20 1 8,  as  well  as  certain  prior  dates,  the 
SCO  sought  and  obtained  from  Judge  Howell  orders  authorizing  and  extending  the  installation  and 
use  of  pen  registers  and  trap  and  trace  devices  to  record  communications  sent  to  or  from  the  Cohen 
Account.  The  SCO  has  provided  pen  register  data  obtained  pursuant  to  those  orders  to  the  USAO. 


“This'af6davit=as”discussed-belowpis=baseddn=part  ommy-review-ofrthe-pen  registendata-obtained- 


pursuant  to  the  November  7,  2017  and  January  4,  2018  orders  (the  “Pen  Register  Data”). 

10.  On  or  about  February  16,  2018,  the  USAO  sought  and  obtained  from  the  Honorable 
Debra  Freeman,  United  States  Magistrate  Judge  for  the  Southern  District  of  New  York,  an  order 
pursuant  to  18  U.S.C.  §  2703(d)  for  email  header  information  associated  with  the  MDCPC 
Account.  This  affidavit,  as  discussed  below,  is  based  in  part  on  my  review  of  email  header 
information  produced  by  1  &  1  in  response  to  that  order  (the  “MDCPC  Header  Information”). 

II.  Probable  Cause 

A.  Overview 

1 1 .  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  FBI  are 
investigating,  among  other  things,  a  scheme  by  Target  Subject  Michael  Cohen  to  defraud  multiple 
banks.  Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President 
Donald  Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump 
Organization,  an  international  conglomerate  with  real  estate  and  other  holdings. 

12.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations  in 
and  omitted  material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banks  in  connection  with  a  transaction  intended  to  relieve  Cohen  of 
approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
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in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  omitted  cash  assets  that  he  began  receiving  in  2017 
from  new  consulting  work;  (ii)  significantly  understated  his  total  holdings  of  cash  and  cash 
equivalents;  and  (iii)  failed  to  inform  the  banks  from  which  he  was  seeking  debt  relief  that  he  had 

I  in  connection  with 


agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party, 

acquisition  of  the  taxi  medallions  securing  Cohen’s  debt.  By  making  these 
=^misrepresentati0ns-andrmateriaLomissions^G0hen=av0ided=making=^mojathly~paymentS:::^!n-his__ 


l0ans,  and  attempted  t0  and  had  secured  proposed  agreements  from  the  banks  to  relieve  him  of 
certain  repayment  obligations  worth  millions  of  dollars. 

13.  Based  on  my  review  of  emails  obtained  from  the  Prior  Cohen  Account  Warrants, 
MDCPC  Header  Information,  and  documents  produced  pursuant  to  subpoenas,  I  have  learned  that 
Cohen  has  used  the  Cohen  Account  and/or  MDCPC  Account  to,  among  other  things,  (i) 

about  the  proposed  transfer  of  Cohen’s  medallions  and  associated  debts;  (ii)  negotiate  a  pay-down 
of  the  principal  amount  of  the  taxi  medallion  loans;  (iii)  communicate  with  his  accountant  about 
the  contents  of  the  false  financial  statements  at  issue;  and  (iv)  send  those  false  financial  statements 
to  Additionally,  the^^^^^^^^^| 

Accoun1^^^^^^^^^^|4ccount  and^^^tccount,  respectively,  to  communicate  with  Cohen 
about  the  status  of  the  taxi  medallion  transaction,  and  to  send  relevant  financial  statements  to 
banks.  Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that 
the  Subject  Accounts  will  include  evidence  of  the  Subject  Offenses. 

B.  Cohen’s  Statements  to  Sterling  National  Bank 

14.  As  set  forth  in  detail  below,  in  2014,  Cohen,  through  limited  liability  corporations 
(“LLCs”)  controlled  by  him  and  his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling 
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National  Bank  (“Sterling”)  and  the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions, 
for  approximately  $20  million.  Though  entered  into  by  LLCs,  the  loans  were  also  secured  by 
personal  guarantees  in  the  names  of  both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry 
weakened  and  the  medallions  were  devalued,  Cohen  sought  to  renegotiate  the  terms  of  those  loans 
and/or  relieve  himself  from  their  obligations,  including  the  personal  guarantees.  As  part  of  that 
effort,  Cohen  made  a  series  of  representations  to  Sterling  and  Melrose  about  his  net  worth,  assets. 


available^Gash,-and-finanGial-outlook.^SpecifiGally,-based-on  my-review-of  recordsmaintained-by- 


Sterling  and  Melrose,  and  public  sources  concerning  the  taxi  industry  and  the  value  of  taxi 
medallions,  as  well  as  my  review  of  reports  prepared  by  law  enforcement  officers  of  interviews 
with  a  Sterling  executive  vice-president  (the  “Sterling  Employee-1”)  and  my  participation  in  an 
interview  with  a  Sterling  employee  (the  “Sterling  Employee-2”),  I  have  learned,  among  other 
things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  LLC  owns  two 
medallions).^  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  from  Capital  One  Bank,  for  which  the  medallions  served  as  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  party  made  monthly  payments  to 
Cohen,  who  in  turn  used  some  of  those  proceeds  to  pay  his  monthly  loan  payments. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 


^  One  of  these  companies.  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One  Bank.  By  in 
or  about  September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would 
allow  Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  in 
value  of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval 
in  the  taxi  industry — as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber — taxi 
medallion  loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  market  value 


ofrtaxtmedallions:was:eonsistently~rising7“Consequently^taxi-medallion4oans=like:the-loans-held- 


by  Cohen — ^were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee- 1 ,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 
and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which — 
according  to  letters  from  Capital  One  Bank  in  Sterling’s  files — ^was  greater  than  his  previous  debt 
at  Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This 
allowed  Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8,  2014,  each  of  Cohen’s  sixteen  taxi  medallion  corporations  entered  into  loan 
agreements  and  promissory  notes  with  Sterling  for  the  principal  sum  of  $  1,375,000,  with  repayment 
due  on  December  8,  2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who 
was  the  sole  shareholder  of  the  corporation.  The  loans  were  also  each  secured  by  a  security 
agreement,  dated  the  same  day,  maldng  the  medallions  collateral  for  the  notes.  To  give  Sterling 
additional  security,  Michael  and  Laura  Cohen  signed  personal  guarantees  and  confessions  of 
judgment,  giving  Sterling  the  right  to  pursue  collection  against  the  Cohens’  personal  assets  were 
their  eorporations  to  default  under  the  loan  agreements.  In  total.  Sterling  agreed  to  lend 
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approximately  $22  million  to  the  Cohens’  companies.  Pursuant  to  participation  agreements, 
Sterling  transferred  45  percent  of  that  debt  to  Melrose.^  Under  the  terms  of  Sterling’s  participation 
agreements  with  Melrose,  Sterling  was  precluded  from  amending  or  modifying  the  loans  without 
the  consent  of  Melrose. 

d.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions.  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling’s 


requesUCohen=provided-Sterling-witlFa^statement-of=finanGiapGondition"“dated“August=4p2014- 


(the  “August  2014  Finaneial  Statement”),  whieh  indieated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.'^  From  my  review  of  a 
Sterling  eredit  memorandum,  dated  September  29,  2014,  I  loiow  that  Sterling  viewed  the 
transaetion  favorably  beeause,  aGGOunting  for  loan  payments,  eash  flows  from  the  medallions  were 
projeeted  to  be  positive,  the  value  of  the  Gollateral  (as  estimated  by  Sterling)  exeeeded  $42  million, 
and  the  net  worth  of  Cohen — ^who  was  the  direet  obligor  under  the  guarantee  agreements — ^was 
over  $77  million.  An  internal  Sterling  eredit  and  risk  rating  analysis  report,  dated  Oetober  20, 
2014,  reGommended  approval  of  the  loans  for  substantially  the  same  reasons. 

e.  Based  on  my  review  of  reeords  maintained  by  Sterling  and  publie  sourees,  I  have 
learned  that  overtime,  the  Gollateral  baeldng  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  eompanies  and  signifieant  devaluation  of  taxi  medallions.  Additionally, 
Cohen  began  falling  behind  on  loan  payments  to  Sterling  and  Melrose.  I  know  from  reeords 
maintained  by  Sterling  and  an  interview  with  Sterling  Employee-2  that,  beginning  in  or  around 


^  Melrose,  whieh  had  a  business  prineipally  foeused  on  taxi  medallion  loans,  is  now  in 
Gonservatorship  by  the  National  Credit  Union  Administration  (“NCUA”). 

^  Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  finaneial  eondition,  also 
dated  August  1,  2014,  whieh  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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September  2015,  Cohen  told  Sterling,  in  sum  and  substance,  that  the  individual  leasing  Cohen’s 
medallions  had  fallen  behind  in  making  payments  to  Cohen,  and  that  as  a  result,  the  monthly  cash 
flow  from  his  taxi  medallions  had  been  reduced,  leaving  him  with  a  shortfall  of  approximately 
$16,000  each  month.  For  instance,  I  have  reviewed  an  email  from  Sterling  Employee-2,  dated 
September  9, 2015,  summarizing  a  call  with  Cohen — ^which  according  to  the  email  and  toll  records 
for  Cohen’s  cellphone  occurred  on  September  8,  2015 — during  which  Cohen  told  Sterling 
-Emplovee-2,-iELSuni,an(Lsuhstance,-about-his„casl]L-flo-W^problems-an(La.,monthlv„shortfall_o£ 
approximately  $16,000.  In  that  same  email.  Sterling  Employee-2  commented  that  despite  Cohen’s 
statements,  his  personal  financial  information  “indicate[d]  a  strong  ability  to  make  up  the  difference 
in  payments.”  Cohen,  however,  according  to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction 
in  Cohen’s  monthly  payments. 

f.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
interview  with  Sterling  Employee-2, 1  have  learned  that  Cohen  and  Sterling  Employee-2  spoke 
again  on  September  28,  2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
know  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility — ^both  internally  and  with  Cohen — of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my  review 
of  loan  documents  and  records  maintained  by  Sterling,  I  Icnow  that  in  or  about  November  2015,  as 
a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his  medallions  to 
cover  monthly  interest  payments.  Sterling  and  Melrose  agreed  to  amend  their  loans  with  Cohen  by. 


02.28,2018 


12 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  48  of  105 


among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extending  the  loan 
maturity  date  to  December  8,  2017. 

g.  I  know  from  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2,  as  well 
as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee-1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  would  agree  to 

assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  records  maintained  by 


-Sterlingpas-well=as"the'interviews~with~Sterling“Employee=^l=and=Sterling^Employee=52=refereneed 


above,  I  know  that  by  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
corporate  taxi  medallions  to  who  is  a  medallion  owner  and  taxi  operator,  for  the 

balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  lonow  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  the  transfer  of  the  medallion  loans — and  because  Sterling  was  unfamiliar  with 

Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3 1 , 20 1 7,  Cohen  told  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with  Indeed,  in  an  email  sent  from  the  Cohen  Account  to  Sterling 

Employee-2  on  or  about  February  22, 2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million 
from  the  loan  amount.” 

h.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 
was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Melrose  summarizing  the  tenns  of  the  proposed  transaction,  and  noting  the  requirement  that 
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emailed  Sterling 


Melrose  agree  to  the  terms.  On  or  about  May  2,  2017, 


Kccount  to  inquire  about  the  status  of  the  transaction. 


Employee- 1  from  the 


1  Account  that 


Sterling  Employee-1  responded  t( 


Melrose  had  agreed  to  the  deal,  and  that  Sterling  would  be  sending 


term  sheet 


shortly. 


i.  In  order  for  the  banks  to  evaluate  the  proposed  transaction  fully,  they  requested 


finaneial-informatiomfromdhe:parties;=©n-0raboUt=0ctober56p2G16j:a-Sterling“employee  emailed— 


Account  about  the  “Cohen  Medallion  Purchase,”  and  stated  “[i]n  order  to 


the 


proceed  with  the  assumption  of  Michael’s  loans,”  Sterling  needed  certain  financial  information 


i  responded  from  the 


ccount,  copying 


Account,  that  he  would  send  a  financial  statement  and  tax 


returns  shortly.  Additionally,  on  or  about  June  7,  2017,  Sterling  Employee-1  emailed  Cohen  to 


request  an  “updated  personal  financial  statement,”  completed  jointly  with  Cohen’s  wife,  and 


Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June  8,2017,  Cohen  emailed  Sterling 
Employee- 1  from  the  Cohen  Account,  attaching  a  Sterling  personal  financial  statement  form  that 
had  been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1, 
2017  (the  “May  2017  Financial  Statement”),  that  was  also  attached.  The  May  2017  Financial 
Statement  included  a  cover  letter  from  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and 
substance,  that  the  information  in  the  statement  came  from  Cohen  and  that  Getzel  had  not 
confirmed  its  accuracy  or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had 
total  assets  of  $41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The 
May  2017  Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in 
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cash,  $26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities' and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence. 

j.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee- 1, 1  have  learned  that  Sterling  Employee- 1  reviewed  each  line  of  the  May  2017  Financial 
Statement  with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee- 1  asked 
Cohen  about  the  cash  amount  listed  on  the  May  2017  Financial  Statement.  Cohen  stated  to  Sterling 

--Empleyee;jhrinrSumTand-substanGe^Aat-:therMayr20Jr7TEinanciahStatement-was-accurate _ _ 

k.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen  at  the  Cohen 

Account  the^^^^^^^^^^^Account,  attaching  a  non-binding  term 

sheet  memorializing  the  potential  transaction  between  Sterling,  Melrose,  Cohen,  and 

mmillim  on  or  about  August  29,  2017,  ^^Jemailed  Sterling  Employee-1  from  the 
Account,  requesting  that  he  be  included  on  “all  future  e-mails  to and/or 

concerning  this  matter,”  and  providing  proposed  edits  to  the  term  sheet.  On  or  about 
August  Sterling  Employee-1  emailed  at  the 

Account,  Cohen  at  the  Cohen  Account,  and  at  the^^^J'kccount,  and  provided  them  with  a 
revised  term  sheet.  On  or  about  September  5,  2017,  Sterling  Employee-1  sent^^^^^^^^^H 
at  the  ^^^^^^^^^^l^ccount,  Cohen  at  the  Cohen  Account,  and^^^at  the  jjj^^^ccount  a 
copy  of  the  executed  term  sheet.  According  to  the  term  sheet,|||||||||||||||||||||||||\vould  borrow 
$20,000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that  ^^^^^|was  to 
acquire  from  Cohen. 

l.  As  part  of  the  agreement,  accordingto  the  term  sheet,  $1,265,913  in  principal  (which 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banks,  with  Cohen  paying  fifty  percent  and  the  banks  dividing  the 
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remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789  respectively  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance — despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars — because 
'Cohemrepresented  omadelephone-calf  with  SterlingdEmployee-lyin  sum  and  substancefthat'he^had^ 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  part  of  the  agreement.  Sterling 
and  Melrose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  ^^^^^^ransaction,  Cohen  would  no  longer 
have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

m.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Melrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
required  and  requested  additional  financial  statements  for  Cohen  and^^^^^^^^or  its  credit 
underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  October  5,  2017, 
^^^^^^^ent  from  the  Account  to  a  Sterling  employee  a  copy  of  ]||^| 

personal  financial  statement.  The  financial  statement  lists  the 
Account  as  the  email  contact  Additionally,  on  or  about  October  5,  2017, 

Cohen,  using  the  Cohen  Account,  re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial 
Statement.  A  day  later,  on  October  6,  2017,  Cohen,  using  the  Cohen  Account,  emailed  Sterling 
Employee-2  a  statement  of  financial  condition,  dated  September  30,  2017  (the  “September  2017 
Financial  Statement”). 
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n.  Like  the  May  2017  Financial  Statement,  the  September  2017  Finaneial  Statement 
ineluded  a  cover  letter  from  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  eonfirmed  its  aceuracy 
or  eompleteness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Finaneial  Statement 


-represented=^t0-Sterling"that  Gohen=had“amegative:rneGworthT=Tlie=September=201T~EinaneiaL 


Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate  holdings),^ 
$3,200,000  in  real  estate  investments,  and  his  $  1 1 ,000,000  personal  residence  (which,  for  the  first 
time,  he  indieated  was  held  in  trust).  The  September  2017  Finaneial  Statement  ineluded  assets  and 
liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  assoeiated  with  his  taxi  medallions  and 
some  of  his  real  estate  investment  entities. 

o.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
reeords  maintained  by  Sterling,  1  have  also  learned  that  at  or  around  the  time  Cohen  provided 
Sterling  with  these  financial  statements — in  or  around  September  2017 — Cohen  stopped  paying 
monthly  loan  pajnnents  on  his  taxi  medallion  loans  altogether.  Aeeording  to  Sterling  Employee- 
2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
prineipal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 


^Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thirty-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  whicj^wa^cnnsiderably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Coher^^^^^^|term  sheet. 


02,28.2018 


17 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  53  of  105 


September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Coher^^^^^^Jtransaction  was  favorable  for  the  bank 
-  that  is,  tha^^^^^^^vould  be  a  better  borrower  than  Cohen. 

p.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  On  December  29,  2017,  Sterling  sent  Cohen  a 
letter  statingj:hat  he  was  in  jiefault  under  the  loans  jetween  Sterling  arid  Cohen’s  medallion 

corporations.  Cohen  did  not  make  an  immediate  payment  on  the  loans,  but  instead  sent  an  e-mail 
to  Sterling  Employee-1  on  or  about  January  24, 20 1 8,  from  the  Cohen  Account,  stating  that  during 
the  closing  of  the  Cohen^^^^^^f.  transaction,  Cohen  would  “bring  all  payments  up  to  date  as 
well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  sent  from  the  Cohen 
Account  on  January  24,  2018,  that  at  the  closing  of  the  Cohen-"^^^^^|transaction,  Sterling 
provide  a  letter  stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal 
guarantees  of  the  medallion  loans  had  been  terminated. 

q.  The  Coher^^^^^^Jtransaction,  however,  did  not  close.  On  or  about  January 
29,  2018^^^^the^^^^^^^|.ttomey,  emailed  attorneys  for  Sterling  from  the^^|\ccount 
and  stated  that  “at  this  time  there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have 
changed  and  we  are  not  prepared  to  go  forward.” 

r.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  Icnow  that  after  the  Cohen-^^^^^^|deal  fell  apart. 
Sterling  assigned  Cohen’s  loans  to  an  employee  at  Sterling  who  specializes  in  collecting  on 
defaulting  loans  (“Sterling  Employee-3”).  From  my  review  of  telephone  call  notes,  I  know  that 
Sterling  Employee-3  spoke  to  Cohen  on  or  about  January  30,  2018  about  paying  down  and/or 
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restructuring  Cohen’s  outstanding  taxi  medallion  loans.  Based  on  my  review  of  an  email  between 
Sterling  Employee-3  and  Cohen,  I  know  that  on  the  January  30,  2018  call,  Cohen  stated  that  he 
would  send  a  “corrected  current”  version  of  his  personal  financial  statement.  Following  that  call, 
on  or  about  January  31,  2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen  Account  a 
copy  of  the  September  2017  Financial  Statement.  Later  that  day,  Cohen  again  emailed  Sterling 
Employee-3  from  the  Cohen  Account  and  proposed  paying  $500,000  to  bring  the  loans  current 
and47“505O00tebring-the=prineipaldDalaneert0r$-2Oj5OO^OOOp::Gohemalsosuggested-revisedrmonthly- 


interest  payment  amounts.  On  or  about  January  31,  2018,  Sterling  Employee-3  responded  to 
Cohen  at  the  Cohen  Account  and  stated,  in  sum  and  substance,  that  Cohen  would  need  to  pay  the 
entirety  of  the  overdue  payments  and  pay  down  the  principal  balance  of  the  loan  to  $20,000,000 
(in  total,  apa)mientof  approximately  $1,750,000),  and  would  need  to  make  larger  monthly  interest 
payments. 


s.  On  or  about  February  1,2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen 
Account  and  proposed  “[pjayment  of  $  1.250m  which  ALL  can  be  used  to  pay  down  principal,  if 
[Sterling]  will  waive  past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $L250m.” 
(Emphasis  in  original.)  Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial 
resources  to  post  additional  collateral  or  pre-fund  monthly  payments.  Based  on  my  participation 
in  an  iiiterview  with  Sterling  Employee-2, 1  have  learned  that  Sterling  continues  to  renegotiate  the 
medallion  loans  with  Cohen  based  on  Cohen’s  representations  about  his  current  financial  position. 


02.28.2018 


19 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  55  of  105 


C.  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 

15.  As  set  forth  in  detail  below,  despite  multiple  representations  by  Cohen  to  Sterling  (and, 
by  extension,  Melrose^)  that  he  had  insufficient  funds  to  pay  down  the  principal  balance  of  the 
medallion  loans,  make  monthly  interest  payments,  or  pay  past-due  amounts,  it  appears  that 
between  2016  and  the  present,  Cohen  opened  and  maintained  bank  accounts  at  First  Republic  Bank 
(‘TjrstRepmblic7)^andlhexLreceiyejdjmilliQnsj3fxlQllarsJn,pjU]mQtle4j;msultingp„ayments_h]Lthes,e_ 
accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these  accounts  and  received  these 
funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling  about  his  personal  finances 
(including  his  assets  and  liabilities)  and  his  ability  to  make  payments  on  the  medallion  loans.  In 
these  disclosures  to  Sterling — and  despite  being  asked  about  these  bank  accounts  by  his 
accountant — Cohen  withheld  information  about  liquid  financial  assets  at  First  Republic. 

16.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced  pursuant  to 
a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of  interviews  with  two 
First  Republic  employees,  I  have  learned,  among  other  things,  the  following: 

a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts,  some  in  his  own  name  and  others 
in  the  names  of  corporate  entities. 


^  Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Melms^c^iat 
Melrose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen-^^^^^^H 
transaction.  Based  on  my  review  of  reports  of  interviews  wj|j|J|||j|||Bmployees,  1  also  Know 
that  Cohen  called  employees  at  Melrose  regarding  the  Cohen^^^^^^Bransaction. 
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b.  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 
Consultants  Account”).  Cohen  was  the  only  authorized  signatory  on  the  account.  When  Cohen 
opened  the  Essential  Consultants  Account,  a  First  Republic  employee  (“First  Republic  Employee- 
1”)  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your-customer 
questions^  about  the  purpose  of  the  account— the  answers  to  which  First  Republic  Employee-1 
-entered=into=a=formi==Cohen=stated,=in=sum”and=substanee,^-that=he^was=opening~Essential^ 


Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Cohen 
also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the  revenue 
from  his  consulting  business — ^which  he  said  was  not  his  main  source  of  income — ^separate  from 
his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  the  account  was  not  intended  to  receive — ^and  does  not  appear  to  have 
received — ^money  in  connection  with  real  estate  consulting  work;  in  addition,  the  account  has 
received  substantial  payments  from  foreign  sources. 

c.  First,  on  or  about  October  27,  2016 — ^the  day  after  he  opened  the  Essential 
Consultants  Account,  Cohen  used  the  account  to  wire  $130,000  to  an  account  held  in  the  name  of 
attorney  Keith  Davidson’s  law  firm.  Based  on  my  review  of  emails  between  Cohen  and  Davidson, 


’  Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

*  First  Republic  Bmployee-1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  persormel.  First 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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obtained  pursuant  to  the  Prior  Cohen  Account  Warrants,  I  believe  that  this  payment  did  not  relate 
to  any  real  estate  consulting  work,  but  rather  was  a  “settlement”  payment  made  to  Davidson’s 
client.  ^  Based  on  my  review  of  public  sources,  I  have  learned  that  Davidson’s  client  is  alleged  to 
have  had  an  extramarital  affair  with  Donald  Trump.  On  or  about  February  13,  2018,  Cohen  made 
a  public  statement  that  “[i]n  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to 
facilitate  a  payment  of  $130,000  to  [Davidson’s  client].” 

-r-dT=::^Seeond^Tknow:feom:myrrevieWro£Eirst-RepubliG-bank-:recordsAat7were-SGheduled- 
by  an  FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real -estate  consulting  services.  Specifically, 
from  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  I  know  the 
following: 

i.  Beginning  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  from  an  entity  called  Columbus  Nova  EEC,  which  were  deposited  into  the 
Essential  Consultants  Account.  According  to  public  sources,  Columbus  Nova  is  an  investment 
management  firm  controlled  by  Renova  Group,  an  industrial  holding  company  based  in  Zurich, 
Switzerland  that  is  controlled  by  Russian  national  Viktor  Vekselberg.  From  January  2017  to 
August  2017,  the  Essential  Consultants  Account  received  seven  payments  totaling  $583,332.98 
from  Columbus  Nova  EEC. 

®  Specifically,  I  have  learned  from  my  review  of  banlc  records  that  on  or  about  October  26, 
2016,  Cohen  transferred  $131,000  from  a  home  equity  line  of  credit  account  at  First  Republic  to 
the  Essential  Consultants  Account;  on  or  about  October  27,  2016,  Cohen  transferred  $130,000 
from  the  Essential  Consultant  Account  to  an  account  held  in  the  name  of  Davidson’s  law  firm  at  a 
bank  based  in  Eos  Angeles;  and  on  or  about  November  1,  2016,  a  wire  transfer  in  the  amount  of 
approximately  $96,645  was  made  from  Davidson’s  account  to  a  bank  account  in  the  name  of 
Davidson’s  client. 
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ii.  Beginning  on  or  about  April  5,2017,  Cohen  began  receiving  payments  from 
Novartis  Investments,  SARL,  which  I  believe  to  be  the  in-house  financial  subsidiary  of  the  Swiss 
pharmaceutical  company  Novartis  International  AG  (“Novartis”).  Between  April  2017  and  January 
2018,  the  Essential  Consultants  Account  received  ten  wire  payments  from  a  Swiss  bank  account 
held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980,  for  a  total  of  $999,800. 

iii.  Beginning  in  or  about  April  2017,  the  Essential  Consultants  Account  started 


reeeivingwvrre=paymentsdfGm=a%ank=aGcount=assoGiatedw?ith“theAeleeommuniGations-Gompany= 
AT&T  hiG.  (“AT&P’).  SpeGifiGally,  on  or  about  April  14,  2017,  AT&T  wired  $100,000  to  the 
Essential  Consultants  Aoeount  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Aeeount  reeeived  nine  $50,000  payments  from  AT&T.  In  total,  AT&T  wired 
$550,000  to  the  Essential  Consultants  Aoeount. 

iv.  On  or  about  May  10,  2017,  June  9,  2017,  July  10,  2017,  and  November  27, 
2017,  the  Essential  Consultants  Aoeount  reeeived  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  aeeount  in  South  Korea.  The  aoeount  holder  from  whieh  the  money  was 
sent  is  Korea  Aerospaee  Industries  Ltd.  (“KAI”).  KAI  is  a  South  Korea-based  eompany  that 
produees  and  sells  fixed-wing  aireraft,  helieopter  aireraft,  and  satellites  to  the  United  States 
Department  of  Defense,  among  other  eustomers. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Aeeount  reeeived  a 
$150,000  deposit  from  an  aeeount  at  Kazkommertsbanlc,  a  Kazakhstani  banlc.  The  listed  aeeount 
holder  at  Kazkommertsbank  was  a  seeond  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
aecompanying  the  wire  payment  indieated  that  the  payment  was  a  “monthly  eonsulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  eonsulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 


08/05/2017.” 
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vi.  In  total,  from  on  or  about  January  3 1 ,  20 1 7  to  on  or  about  January  1 0, 20 1 8, 
the  Essential  Consultants  Account  received  approximately  $2,883,132.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  10,  2018,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23. 

e.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  “MDC&A  Account”). 

=C0hemwas=the^only=authorized-^signatory”on=the=acGount^=-Among“OtherAhings^=the-MDC&A:= 
Account  received  ten  wire  transfers  and  one  check  from  an  account  in  the  name  of  Squire  Patton 
Boggs,  a  law  firm.  In  total,  from  on  or  about  April  5,  2017,  to  on  or  about  January  2,  2018,  the 
MDC&A  Account  received  $426,097.70  in  deposits,  and  the  balance  in  the  account  as  of  January 
2,  2018,  was  $344,541.35.  As  discussed  below,  Cohen  never  disclosed  any  of  the  balance  in  the 
Essential  Consultants  or  MDC&A  accounts  to  Sterling  during  the  negotiations  with  respect  to  the 
•ansaction,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

17.  Based  on  my  review  of  emails  from  the  Cohen  Account  that  were  seized  pursuant  to 
the  Prior  Cohen  Account  Warrants,  and  my  review  of  reports  of  interviews  with  employees  of 
AT&T  and  Novartis,  it  appears  that  the  aforementioned  payments  to  the  Essential  Consultants 
Account  and  MDC&A  Account  ostensibly  were  for  political  consulting  work,  including  consulting 
for  international  clients  on  issues  pending  before  the  Trump  administration.  Specifically,  from 
my  review  of  emails  from  the  Cohen  Account  and  public  sources,  I  have  learned  the  following: 


Based  on  my  review  of  public  sources,  I  have  learned  that  Cohen  is  not  registered  as  a 
lobbyist  or  as  a  person  acting  as  an  agent  of  foreign  principals,  as  may  have  been  required  by  the 
Foreign  Agents  Registration  Act. 


02.28.2018 


24 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  60  of  105 


a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  from  the  Cohen  Account  to  an 

individual  whom  I  believe  is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  document 
purporting  to  be  a  “Consulting  Agreement”  between  KAI  and  Essential  Consultants  dated  as  of 
about  May  1,  2017.  The  document  indicates  that  Essential  Consultants  would  render  “consulting 
and  advisory  services,  as  requested”  by  KAI,  and  that  KAI  would  pay  Essential  Consultants  “a 
consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000.00)  US  Dollars,”  disbursed 
threugh-eight-:$lA0j0.00rinstallm6ntSzbetweenrMay220U7-andrDeeember=2Qlr7 _ _ 

b.  On  or  about  May  10,  2017,  Cohen  sent  an  email  from  an  alternate  email  address, 
copjdng  the  Cohen  Account,  to  an  employee  of  BTA  Bank.  To  the  email,  Cohen  attached  an 
invoice  to  BTA  Bank  in  the  name  of  Essential  Consultants.  The  invoice  contemplated  a  $150,000 
payment  to  Essential  Consultants  for  a  “monthly  consulting  fee.” 

c.  On  or  about  February  1 3, 20 1 7,  Cohen  emailed  an  AT&T  employee  from  the  Cohen 
Account  what  appears  to  be  a  consulting  agreement,  which  contemplates  that  Essential  Consultants 
“shall  render  consulting  and  advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential 
Consultants]  of  those  issues  and  matters  with  respect  to  which  AT&T  Services  desires  [Essential 
Consultants] ’s  assistance  and  advice.”  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his 
services  ...  a  consulting  fee  of  Fifty  Thousand  ($50,000)  Dollars  .  .  .  per  month.”  Based  on  my 
review  of  reports  of  interviews  with  AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen 
to  consult  on  political  issues,  including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner, 
and  tax  reform. 


d.  On  or  about  January  17,  2017,  Cohen  emailed  to  a  representative  of  Novartis  from 
the  Cohen  Account  a  contract  between  Novartis  and  Essential  Consultants,  which  provides  that 
Essential  Consultants  will  “provide  consulting  and  advisory  services  to  Novartis  on  matters  that 
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relate  to  the  repeal  and  replacement  of  the  Affordable  Care  Act  in  the  US  and  any  other  issues 
mutually  agreeable  to  [Essential  Consultants]  and  Novartis.”  The  contract  provides  for  a 
“consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to 
Essential  Consultants  in  even  monthly  installments  over  the  course  of  a  year.  Based  on  my  review 
of  reports  of  interviews  with  Novartis  employees,  I  have  learned  that  Novartis  retained  Cohen  to 
provide  political  consulting  services  and  to  gain  access  to  relevant  policymakers  in  the  Trump 
-Administration, - , -  -  - - 


e.  On  or  about  April  3,  2017,  Squire  Patton  Boggs,  a  law  firm,  announced  on  its 
website  that  is  had  formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would 
“jointly  represent  clients.” 

18.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
by  Getzel,  my  notes  1 

have  learned  the  following: 

a.  In  or  about  May  2017,  Getzel  met  with  Cohen  at  a  law  firm  in  Manhattan,  New 
York.  At  the  meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice 
called  Michael  D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants 
LLC.  Cohen  told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in 
connection  with  his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to 
be  between  five  and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  at  the  Cohen 
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Account  in  which  Getzel  wrote  that  “[a]ttached  is  adraft  ofthenewPFS  as  of  September  30, 2017” 
and  attached  a  draft  of  the  September  2017  Financial  Statement.  The  draft  statement  reflected  that 
as  of  September  30,  2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately 
$33,430,000  (comprised  of  taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence 
and  property),  and  liabilities  of  approximately  $45,630,000,  leaving  him  purportedly  over  $12 
million  in  debt.  In  the  same  email,  Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact 


fthaftthe=fmanGiaFstatemenTdid=not"list  any  assets=assoGiated-with"either  the=Essential-Consultants , 


AGGOunt  or  the  MDC&A  Aoeount:  “[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  - 
Miehael  D.  Cohen  &  Assoeiates  POC  [5/c]  and  Essential  Consultants  EEC.  Please  advise  whether 
or  not  these  should  be  diselosed  and  what  value.” 

G.  On  or  about  Ootober  6, 2017,  Cohen  Galled  Getzel  by  telephone — ^whioh  is  refleoted 
on  toll  reGords  for  Cohen’s  eellphone — and  told  Getzel,  in  sum  and  substanoe,  not  to  inelude 
Essential  Consultants  or  MDC&A  in  the  September  2017  Finanoial  Statement  beoause  they  had  no 
value. 

d.  On  or  about  Ootober  6, 20 1 7,  following  the  eall  with  Getzel,  Cohen,  using  the  Cohen 
AcGOunt,  responded  to  Getzel’s  email  with  the  answer  “[IJooks  good  to  me.”  Cohen  never  direeted 
Getzel  to  make  any  ehanges  to  his  eash  position  as  listed  in  the  September  2017  Finanoial 
Statement.  Neither  Essential  Consultants  nor  MDC&A  was  listed  on  the  September  2017  Finanoial 
Statement  that  was  provided  to  Sterling. 

19.  Based  on  the  foregoing,  and  from  my  review  of  bank  reoords  and  emails  sent  by  Cohen 
to  Sterling,  I  know  that  the  September  2017  Finanoial  Statement  made  no  mention  whatsoever  of 
assets  that  Cohen  held  in  the  Essential  Consultants  Aoeount  or  the  MDC&A  Aoeount.  As  of 
September  30,  2017 — the  date  of  the  September  2017  Finanoial  Statement — Cohen  had 
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approximately  $673,729.95  in  the  Essential  Consultants  Account  and  $248,619.28  in  the  MDC&A 
Account.  As  of  October  6, 2017,  the  date  when  Getzel  asked  Cohen  about  the  two  accounts,  Cohen 
had  approximately  $823,709.95  in  the  Essential  Consultants  Account  and  $248,619.28  in  the 
MDC&A  Account. 

Cohen  Understated  His  Available  Cash 

20.  In  addition  to  withholding  the  existence  of  the  Essential  Consultants  Account  and  the 

MD-C&A-AccountJfom-Sterling-ancLMelrose,.itappears_thatjCohemalso_substantialLwunderstated _ 

his  available  cash  and  cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  fi'om  my 
review  of  the  September  2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen 
represented  that  he  had  $1,250,000  in  cash  as  of  September  30,  2017.  But,  from  my  review  of  a 
summary  of  bank  records  that  were  scheduled  by  an  FBI  forensic  accountant,  I  have  learned  that 
Cohen  had  over  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30,  2017.  Specifically, 
fi'om  my  review  of  the  account  schedule  and  banlc  records,  I  have  learned  the  following: 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 

c.  As  of  September  30, 2017,  Cohen  had  $260,689.18  in  an  account  at  Signature  Bank. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30, 2017. 

f.  As  of  September  30, 2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  his  name  and  one  held  jointly  with  his 
wife — ^and  the  total  balance  across  the  two  accounts  as  of  September  30,  2017  was  $300,096.72. 

h.  In  total,  as  of  September  30, 2017,  Cohen  had  at  least  $5,014,051.80  in  his  accounts 
aUCapitaUOne-BankT^Signature  Bankf  TD=Bank7=Bethpage=Gredit-Unionp:EirsURepublieprand 
Morgan  Stanley. 

2 1 .  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to  Sterling 
and  Mehose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen  withheld 
information  regarding  approximately  $5  million  in  funds  from  Sterling  and  Melrose  in  order  to 
secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews  with  Sterling 
Employee-1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling  and  Melrose 
would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to  renegotiate 
Cohen’s  medallion  loans  and  on  what  terms,  or  approve  of  the  transfer  of  those  loans  to 


Cohen  Had  a  Side  Agreement  With 


22.  As  set  forth  in  detail  below,  it  appears  that  during  the  course  of  Cohen’s  negotiations  to 


sell  his  interest  in  taxi  medallions  and  the  associated  debt  to 


Cohen  not  only 


misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  deal  he  had 


negotiated  with 


it  appears  that 


agreed  to  pay  an  above-market  price  for 


Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay 


pproximately 
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$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  reports  prepared  by  law  enforcement  officers  of  interviews  with  Sterling 
Employee- 1,  as  well  as  my  participation  in  an  interview  with  Sterling  Employee-2, 1  have  learned, 
among  other  things,  the  following: 

a.  On  or  about  September  5,  2017,  an  executed  term  sheet  was  circulated  by  Sterling 


Employee- 1  to  Cohen  and 


See  supra  14(k).  According  to  the  term  sheet. 


yould=^borFow#205OO0=OOO€rom-Sterling  and=Melrose=to-be  securedEy-the^medallions — 


pas  to  acquire  from  Cohen.  At  a  price  of  $20  million  for  thirty-two  taxi  medallions, 
the  proposed  transaction  valued  each  medallion  as  worth  $625,000.  The  term  sheet  also 
contemplated  a  $1,265,913  pay-down  of  the  principal  balance  of  the  loan.  The  term  sheet  made  no 

^^^^|or  any  other  form  of  pa)ment  or 


mention  of  a  $3.8  million  payment  from  Cohen  to 
financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 


describing  the  terms  of  the  Cohen-''* 
not  mention  any  payments  from  Cohen  to 


Itransaction  and  the  new  loan  to 


including  a  $3.8  million  payment.  The 


memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medallion”  but  “it  is  recognized  that  this  is  not  in  line  with  current  market  values.”  Indeed, 
according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
2018,  taxi  medallions  sold  for  amounts  ranging  from  $120,000  to  $372,000.  According  to  Sterling 

agreed  to  a  purchase 


Employee-1  and  Sterling  Employee-2,  they  were  never  told  thatl 
price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  malce 
any  payment  to 
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23.  While  Cohen  did  not  disclose  any  payment  from  Cohen  to 

^H|||m[in  communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  a  report  prepared  by  law 
enforcement  agents  of  an  interview  with  Getzel,  I  have  learned  the  following,  in  substance  and  in 
part,  regarding  the  proposed  side-payment  from  Cohen  to 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled7=^Sale-ofrf'f¥C^Medallion=Entities=and=]Debt-Assumption^(the=Getzel-Memorandum=)^ 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and^^^^^^^^ 
in  part,  as  follows;  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  their  bank  indebtedness,  upon  the  [Cohens’]  paying  down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800,000.”^^ 

b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 

payment  of  $3,800,000  to  but  Getzel  did  not  know  where  Cohen  was  goitig  to  obtain 

$3,800,000  to  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 

cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $1 .25  million  in  cash. 

24.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 
with  the  participating  interest  in  the  loans)  and  repoits  of  interviews  of  representatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and  ||||||||[||||[||was  aware  of  the  planned  $3.8  million 
side  payment  from  Cohen  to 


The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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D.  Probable  Cause  Regarding  the  Subject  Accounts 

25.  As  set  forth  above,  since  at  least  September  20 1 5,  if  not  earlier,  Cohen  has  told  Sterling 
that  he  has  difficulty  making  payments  on  his  medallion  loans  and,  since  at  least  October  2016, 
Cohen  has  been  actively  engaged  in  an  attempt  to  sell  his  taxi  medallions  and  the  associated  debts 
In  the  course  of  doing  so,  Cohen  has  used  the  Cohen  Account  and/or  MDCPC 
Account  to  engage  in  email  communications  regarding  the  terms  of  the  transactions  and  the 


-undisclosed— side-payment^with| 


at— the 


l\ccount,  and ' 


|-Account,_^^H 
Account.  Specifically, 


as  described  above,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  have  been  used 
regarding  the  proposed  Cohen|||^^^^^|transaction  with  Sterling: 

a.  Cohen  has  used  the  Cohen  Account  to,  among  other  things,  negotiate  a  pay-down 
of  the  principal  amount  of  the  loan,  see  supra  Tf  14(g),  to  send  teim  sheets  to  Sterling,  see  supra  f 
140),  to  communicate  with  his  accountant  about  the  contents  of  financial  statements,  see  supra  Tf 
16,  to  send  financial  statements  to  Sterling,  see  supra  Tf  14(i),  (1),  to  check  on  the  status  of  the 
transaction  as  of  January  24,  2018,  see  supra  Tf  14(n),  to  negotiate  a  reduction  of  his  debt  with 
Sterling  on  or  around  January  31,  2018,  see  supra  Tf  14(o),  to  tell  Sterling  on  February  1, 2018,  he 
does  not  have  the  ability  to  pay  more  than  $1,250,000,  see  supra  ^  14(p),  and  to  communicate  with 
individuals  responsible  for  soui'ces  of  pa)ments  to  the  Essential  Consultants  Account,  see  supra  f 
15.  In  other  words,  from  the  communications  described  above,  it  appears  likely  that  the  Cohen 
Account  will  contain  recent  evidence  of  the  Subject  Offenses,  including  communications  and 
potential  misrepresentations  to  Sterling,  and  evidence  indicating  that  statements  made  to  Sterling 
are  false  or  misleading. 


I  has  used  the 


Ikccount  to  communicate  about 


the  proposed  taxi  medallion  transaction  with  Cohen,  which  appears  to  have  been  discussed  as  early 


02.28.2018 


32 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  68  of  105 


as  October  2016.  See  supra  T]  14(g).  Specifically,  as  described  above,  as  early  as  May  2,  2017, 
lused  Account  to  inquire  about  the  status  of  the  transaction, 

see  supra  T|  14(h).  He  used  the  ^^^^^^^^^^Account  to  exchange  drafts  of  the  proposed  term 


sheet  with  CohenJ 
used  by 
see  supra  14(1).  Th(| 


land  Sterling,  see  supra  140.  The  I 
|to  send  a  personal  financial  statement  foil 

{Account  was  copied  on  emails  from  the  J 


Account  was  also 
to  Sterling, 


=Aecount-=ab0ut-the=;transactionf:-s'ce=j'Mj9ra-^=^14(i)i^and-wasHisted=on- 


hfinanciah 


statement  as  the  contact  email  supra  ^  14(m).  Additionally,  based  on  my 

review  of  MDCPC  Header  Information,  I  Icnow  that  on  or  about  September  1,  2017 — at  or  around 
the  time  the^^^^^^l  and  Cohen  were  negotiating  a  term  sheet-^^^^^^^^^^^used  the 
^^^^^^^^^fVccount  to  send  and  receive  eight  emails  from  Cohen  at  the  MDCPC  Account. 

c.  ^^^|aas  used  the^^^|i.ccount  to  communicate  with  Sterling  employees,  Cohen, 
and^^^^^^^^^|ibout  the  proposed  taxi  medallion  transaction  since  at  least  December  2016. 
See  supra  TfH  14(g),  24(c).  Specifically,  on  or  about  August  29,  2017(^^^|old  Sterling  that  he 
should  be  included  on  “all  future  e-mails”  involving  the  proposed  transaction,  see  supra  Tf  14(j). 
Additionally,  ^^^|vas  involved  in  making  revisions  to  the  parties’  term  sheets,  and  he  told 
Sterling  on  January  29,  2018  that^^^^^^^rould  not  go  forward  with  the  planned  transaction, 
see  supra  Tf  14(j),  (n).  Accordingly,  there  is  probable  cause  to  believe  that  the  ^^^Account  will 
contain  evidence  of  the  negotiations  between  Sterling  and  the  parties,  evidence  of  a  pa)nnent  from 
Cohen  and  the  reasons  for  the  collapse  of  the  Cohen-^^^^^Htransaction. 


'^FoHnstance^om  records  provided  by  Sterling,  I  know  that  on  or  about  December  2, 
2016,^^^l^^^^^lsent  an  email  to  a  Sterling  emplove^^ing  the . 

Account.  The  email  forwarded  correspondence  between^^^lwho  was  using  the  I 
Account,  and  an  employee  of  Capital  One  regarding  extending} 

Capital  One. 


ban  with 
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26.  Additionally,  it  appears  that  Cohen  set  up  the  MDCPC  Account  to  receive  emails  he 
.  was  previously  receiving  at  the  Cohen  Account.  Specifically,  based  on  my  review  of  records 
maintained  by  AT&T,  I  have  learned  that  on  or  about  May  5,  2017,  Cohen  sent  an  email  from  the 
MDCPC  Account  to  a  blind  copy  list  of  recipients  stating  that  “[d]ue  to  the  overwhelming  volume 
of  phone  calls  and  emails  coming  into  my  previous  cellular  number  and  e-mail  address,  I  have 
elected  to  create  for  Clients  Only  the  following.  Kindly  use  this  new  information  for  all  future 

=eontacf  andusommunieations^Mhe  signaturedine  on  the-email=listed=‘‘Essentiat  ConsultantsdsTC^ 
and  “Michael  D.  Cohen  &  Associates,  PC,”  as  well  as  the  MDCPC  Account  as  the  email  address.^^ 

27.  In  addition,  based  on  my  review  of  emails  from  the  MDCPC  Account  produced 
pursuant  to  the  Prior  Cohen  Account  Warrants  and  the  MDCPC  Header  Information,  I  have  learned 
that  Cohen  has  used  the  MDCPC  Account  to  send  and  receive  emails  from  the  Cohen  Account,  to 
communicate  with  the^^^|\ccount,  and  to  send  and  receive  emails  from  other  email  accounts 
about  his  political  consulting  business.  Additionally,  from  my  review  of  the  MDCPC  Header 
Information,  it  appears  that  since  the  November  13,  2017  search  warrant  on  the  MDCPC  Account, 
Cohen  has  continued  to  send  and  receive  emails  at  the  MDCPC  Account  that  appear  likely  to  be 
relevant  to  the  commission  of  the  Subject  Offenses.  For  example,  emails  obtained  pursuant  to  the 
Prior  Cohen  Account  Warrants,  as  well  as  the  MDCPC  Header  Information  have  revealed  the 
following: 

a.  On  approximately  eight  occasions  in  August  and  September  2017,  while  Cohen, 
ere  communicating  about  a  term  sheet  for  the  Coheu^^^^^^Htaxi 


Based  on  my  review  of  emails  from  the  MDCPC  Account  obtained  pursuant  to  subpoena,  I 
have  learned  that  Cohen  has  used  the  account  to  communicate  with  numerous  individuals  with 
whom  he  does  not  enjoy  an  attorney-client  privilege,  including  some  of  the  individuals  described 
below.  See  infra  Tf  27. 
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medallion  transaction,  see  supra  14(k),  Cohen  used  the  MDCPC  Account  to  send  or  receive 
emails  fron^^^^at  the^^^|kccount.  For  instance,  on  or  about  August  22,  2017,^^|ased 
the^^^l^ccount  to  send  an  email  to  Sterling  Employee- 1  and  copied  Cohen  on  the  email  at  the 
MDCPC  Account.  On  the  same  day,  Sterling  Employee- 1  responded  the 

and  Cohen  at  the  MDCPC  Account.  On  or  about  August  22,  2017,  Cohen  also  used  the  MDCPC 
Account  to  send  an  email  to  Sterling  Employee- 1 . 

======^~b7'=^ffnTDted“ahGveyi3mor  about‘Septemher4=201#yCohenmsedhhedVDDCP6uAtGCount- 

to  send  or  receive  eight  emails  with  the  j^^^^^^^^^kccount. 

c.  Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who 
work  at  companies  with  whom  it  appears  Cohen  has  a  political  consulting  agreement.  For 
example,  beginning  in  April  2017 — ^the  same  month  when  Cohen  began  receiving  pa5mients  from 
AT&T,  see  supra  16(d),  17(c) — Cohen  used  the  MDCPC  Account  to  send  and  receive  emails 
from  AT&T  employees.  These  emails  contain,  among  other  things,  invoices  from  Cohen  to  AT&T 
for  consulting  work  by  Cohen.  Similarly,  beginning  in  April  2017 — ^which  is  also  the  month 
Cohen  began  receiving  payments  from  Novartis  for  consulting  work,  see  supra  16(d),  17(d) — 
Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  from  employees  of  Novartis.  These 
emails  concern,  among  other  things,  invoices  from  Cohen  and  requests  for  Novartis  for  Cohen’s 
assistance  on  an  initiative  relating  to  drug  pricing. 

d.  From  my  review  of  the  MDCPC  Header  Infonnation,  I  have  learned  that  Cohen  has 
continued  to  use  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who  work  at 
companies  with  whom  it  appears  Cohen  had  a  political  consulting  agreement,  such  as  Novartis  and 
AT&T.  For  instance,  on  approximately  six  occasions  between  November  28,  2017  and  January 
30,  2018,  the  MDCPC  Account  was  used  to  send  and  receive  emails  from  accounts  belonging  to 
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individuals  using  @att.com  email  addresses.  Similarly,  on  approximately  seventeen  occasions 
between  December  1,  2017  and  February  20,  2018,  the  MDCPC  Account  was  used  to  send  and 
receive  emails  from  accounts  belonging  to  individuals  using  @novartis.com  email  addresses. 
Since  November  1 5, 201 7,  the  MDCPC  Account  has  also  sent  and  received  emails  with  individuals 
using  the  email  domains  @bta.kz,  which  I  believe  is  the  email  domain  used  by  employees  of  BTA 
Bank,  see  supra  16(d),  17(b),  and  @squirepb.com,  which  I  believe  is  the  email  domain  used  by 
employees  of  the  law  firm  Squire  Patton  Boggs — ^both  of  which  Cohen  appears  to  have  a 


consulting  relationship  with,  see  supra  16(e),  17(e).  Accordingly,  it  appears  that  Cohen 
continues  to  use  the  MDCPC  Account  to  send  and  receive  emails  that  will  be  relevant  to  whether 
he  is  maintaining  a  consulting  business,  what  type  of  consulting  work  he  is  doing,  and  whether  he 
is  receiving  money  for  that  consulting  work. 

28.  In  addition  to  the  foregoing,  based  on  my  review  of  the  Pen  Register  Data,  see  supra  ^ 
9,  it  appears  that  since  the  date  of  the  last  search  warrant  on  the  Cohen  Account  {i.e.,  November 
13,  2017),  Cohen  has  continued  to  use  the  Cohen  Account  to  communicate  with  the 

Account,  the^^J^ccount,  and  other  email  accounts  that  appear  likely  to  be  relevant 
to  the  commission  of  the  Subject  Offenses  described  above.  For  example,  the  Pen  Register  Data 
has  revealed  the  following: 

a.  Emails  sent  by  the  Cohen  Account  to  the  ^^H^ccount  on  or  about  December  1 8, 

2017  at  8:26  p.m.,  December  21,  2017  at  9:35  p.m.,  December  22,  2017  at  4:32  p.m.,  January  3, 

2018  at  8:01  a.m.,  January  3,  2018  at  2:56  p.m.,  and  January  4,  2018  at  3:31  p.m. 

b.  An  email  sent  by  the  Cohen  Account  to  Account  on  or  about 

January  25,  2018  at  8:55  p.m. 
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c.  Emails  from  the  Cohen  Account  to  the  email  account 


on  or 


about  December  1,  2017  at  2:14  p.m.,  December  29,  2017  at  10:20  p.m.,  January  2,  2018  at  3:52 
p.m.,  January  2,  2018  at  5:44  p.m.,  and  January  8,  2018  at  6:38  p.m.  Based  upon  my  review  of 


i  email  account 


emails  contained  in  the  Cohen  Account,  I  have  learned  that  the 


belongs  to  Jeffrey  Getzel,  Cohen’s  accountant,  through  whom  Cohen  made  misrepresentations  to 
financial  institutions,  as  discussed  above. 

=========‘d7=Emails=fromFthe*CohenA;eeonnttD^emailaeeounts=belonging^to“SterliHgemployees= 

including  Sterling  Employee-1,  on  or  about  January  25,  2018  at  10:23  p.m.,  January  26,  2018  at 
12:55  a.m.,  January  29, 2018  at  5:30  p.m.,  January  29,  2018  at  8:29  p.m.,  January  30, 2018  at  6:44 

p.m. 


e.  An  email  sent  from  the  Cohen  Account  to  the  email  account 


clientserviceny@firstrepublic.com  on  or  about  January  25,  2018  at  5:29  p.m.  As  stated  above. 
First  Republic  is  the  bank  at  which  the  Essential  Consultants  Account  is  held. 


f.  Numerous  emails  sent  from  the  Cohen  Account  to  the  email  account 


including  emails  on  or  about  December  4,  20 1 7  at  2: 1 7  p.m.  and  January  29, 


20 1 8  at  5 :43  p.m.  Based  upon  the  email  address  and  domain  name,  as  well  as  my  review  of  reports 
of  interviews  and  documents  reflecting  that  Cohen’s  taxi  medallions  were  leased  and  operated  by 


email  address  belongs  to 


1  believe  that  the 


29.  Based  on  my  review  of  records  maintained  by  Sterling,  1  know  that  Cohen  used  the 


Cohen  Account  to  send  and  receive  documents  related  to  the  Cohen- 


transaction. 


Based  on  my  training  and  experience,  I  Icnow  that  Google  allows  users  of  e-mail  accounts  to  easily 
save  documents  to  file  sharing  and  retention  platforms  such  as  Google  Docs  and  Google  Drive.  I 
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also  know,  from  my  training  and  experience,  that  users  of  e-mail  accounts  often  use  instant 
messaging  interfaces  linked  to  their  email  accounts.  Further,  I  have  learned  that  the  Providers 
maintain  records  of  search  and  web  histories  associated  with  email  accounts  and,  based  on  my 
training  and  experience,  users  of  e-mail  accounts  use  associated  web  search  browsers  associated 
with  a  subscriber’s  account  to  research  topics  they  are  e-mailing  about.  Accordingly,  there  is 
probable  cause  to  believe  that  content  information  associated  with  the  Subject  Accounts  will  also 

^^ntaiiFevMmee^Telatedto^the  SubjexP©ffenses~  —  - - - ~  —  - - - ' 

30.  Thus,  I  respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other 
content  information  from  the  Subject  Accounts  will  contain  evidence  of  Cohen’s  efforts  to  sell  his 
taxi  medallions  and  the  associated  debt,  and  his  misrepresentations  and  omissions  to  Sterling  and 
Melrose  in  connection  with  these  negotiations.  Although  Cohen  appears  to  have  communicated 

withmmilHimilllll^miimmprimarily  the 

MDCPC  Account,  I  Imow,  based  on  my  involvement  in  the  investigation,  that  Cohen  also  used  at 
least  one  other  email  account  associated  with  his  position  at  the  Trump  Organization.  Thus,  I 
respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other  content  information 
from  th^^^^^^^^^^^ccount,  ^^^^^^^^^^Account  and^^^|A.ccount  or 

about  October  1,  2016 — ^the  approximate  date  of  when  Cohen’s  efforts  to  sell  his  taxi  medallions 
and  the  associated  debt  began — ^will  reflect  communications  with  the  Cohen  Account,  MDCPC 
Account,  and  possibly  one  or  more  additional  accounts  used  by  Cohen,  and  probable  cause  to 
believe  that  such  emails  will  constitute  evidence  of  Cohen’s  commission  of  the  Subject  Offenses, 
including  the  extent  to  which  Cohen  did  or  did  not  inform  other  individuals  involved  in  the  conduct 
above — 

omissions  to  financial  institutions. 
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31.  Temporal  Limitation.  This  application  seeks  all  emails  and  other  requested  content 
information  specified  in  Attachments  A,  B,  C,  and  D  for  the  following  periods: 

a.  For  the  Cohen  Account,  this  application  seeks  all  emails  sent,  created,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above, 
pursuant  to  the  Prior  Cohen  Account  Warrants,  the  SCO  obtained  and  provided  to  the  USAO 
emails  from  the  Cohen  Account  that  were  sent,  created,  or  received  before  November  14,  2017. 


'This="applic'ation~alseFseeks^other-infonTiatron=speGified=abGve=assoGiated=witfrthe-Cohen=AGGount- 


that  was  Greated  between  Deeember  1,  2014  (the  month  when  Cohen  entered  into  the  medallion 
loans  with  Sterling),  and  the  date  of  the  proposed  warrant,  inelusive. 

b.  For  the  MDCPC  Aeeount,  this  applieation  seeks  all  emails  sent,  ereated,  or  reeeived 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inelusive.  As  deseribed  above, 
pursuant  to  a  prior  warrant,  the  SCO  obtained  and  provided  to  the  USAO  emails  from  the  MDCPC 
Aeeount  that  were  sent,  ereated,  or  reeeived  before  November  14,  2017. 

For  the^^^^^^^^l  Aoeount  and  ^^^^^^^^^^Aeeount, 
seeks  emails  and  all  other  eontent  information  speeifled  above  sent,  ereated,  or  reeeived  between 
Oetober  1,  2016,  and  the  date  of  the  proposed  warrant,  inelusive.  As  deseribed  above,  Oetober 
2016  is  the  month  in  whieh  Cohen  began  negotiating  the  taxi  medallion  sale  with  the 

d.  For  the  ^^^^AeGount,  this  applieation  seeks  emails  and  all  other  content 
information  specified  above  sent,  created,  or  received  between  December  1,  2016,  and  the  date  of 
the  proposed  warrant,  inclusive.  As  described  above,  December  2016  is  the  month  in  which^^H 
began  representing  the^^^^^^lon  relation  to  the  taxi  medallion  transaction. 

E.  Evidence,  Fruits  and  Instrumentalities 

32.  Based  upon  the  foregoing,  1  respectfully  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Google’s  servers  associated  with  the  Cohen  Account  will  contain  evidence. 
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fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  as  more  fully  described  in 
Section  II  of  Attachment  A  to  the  proposed  warrant  for  the  Cohen  Account  and  MDCPC  Account, 
including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the  Cohen  Account  or  MDCPC  Account. 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling,  Melrose, 


and/or-taxtmedaUions^ 


c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 

agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  or  liabilities,  to  others,  including  to  and/or  entities 

associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature 
and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  & 
Associates; 


e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Cohen  Account  and/or  MDCPC  Account  about  any  matters  relating  to 
Essential  Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to 


|md/or  entities  associated  with  him; 


f.  Communications  between  the  Cohen  Account  and/or  MDCPC  Account  and  Jeffrey 
Getzel  relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 


02.28.2018 


40 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  76  of  105 


g.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Cohen  Account  and  MDCPC  Account  was 
accessGdor-used;=tO'determine4he^geographic^and=chr0nologicahcontext-oEaccount“access^use;= 
and  events  relating  to  the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Cohen  Account  and  MDCPC  Account  owner’s  intent  as  if 
relates  to  the  Subject  Offenses  under  investigation. 

33.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 


Account  and 


information  stored  on  Google’s  servers  associated  with  thel 

^^^^^^HAccount  will  contain  evidence,  fruits,  and  instrumentalities  of  violations  of  the  Subject 
Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 


identity  of  the  person(s)  who  created  or  used  th| 
Account; 


Ifccount  andl 


b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 
or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  tc^^^^^^^^^|and/or  entities  associated 
with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
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communicated  with  the^^^^^^^^^^^Account  and  ||^^^^^^^^^|Account  about  any 
matters  relating  to  any  plan  or  proposal  or  agreement.for  Cohen  and/or  entities  associated  with  him 
to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to 
and/or  entities  associated  with  him; 

d.  Communications  between  the  Account  and^^^^^^H 

Account  and  others,  including  employees  or  representatives  of  Sterling,  Melrose,  or  other  financial 

T=rijnstitution(s)fregarding^Coheri^s4inances;= —  —  - _ 

e.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the 

^^^^^^^Account  were  accessed  or  used,  to  determine  the  geographic  and  chronological  context 
of  account  access,  use,  and  events  relating  to  the  crimes  under  investigation  and  to  the  account 
owner; 

g.  Evidence  indicating  the^^^^^^^^^^^ccount  and 
owners’  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

34.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Oath’s  servers  associated  with  the  ^^^Account  will  contain  evidence, 
fiuits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  including  the  following; 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the^^^B'^ccount; 


Account  and 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 
or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  ^^^^^^^^^^|ind/or  entities  associated 
with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 

=eommuniGated=with^the^^J^CGOunt^about^any^matters^relating=to=any=plan-or=proposatoErrr: 

agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  or  liabilities,  t(^^^^^^^^md/or  entities  associated  with  him; 

d.  Communications  between  the  ^^J^ccount  and  others,  including  employees  or 
representatives  of  Sterling,  Melrose,  or  other  financial  institution(s),  regarding  Cohen’s  finances; 
and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

ni.  Review  of  the  Information  Obtained  Pursuant  to  the  Warrant 

35.  Pursuant  to  18  U.S.C.  §  2703(g),  the  presence  of  a  law  enforcement  officer  is  not 
required  for  service  of  a  search  warrant  issued  under  §  2703,  or  for  the  collection  or  production  of 
responsive  records.  Accordingly,  the  warrant  requested  herein  will  be  transmitted  to  the  Providers, 
which  shall  be  directed  to  produce  a  digital  copy  of  any  responsive  records  to  law  enforcement 
personnel  within  30  days  from  the  date  of  service.  Law  enforcement  personnel  (including,  in 
addition  to  law  enforcement  officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the 
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status  of  the  investigation  and  related  proceedings,  attorneys  for  the  government,  attorney  support 
staff,  agency  personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts 
under  government  control)  will  retain  the  records  and  review  them  for  evidence,  fruits,  and 
instrumentalities  of  the  Subject  Offenses  as  specified  in  Section  III  of  Attachments  A,  B  and  C  to 
the  proposed  warrant. 

36.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  methods  to 


^OGate-evidenGepfruitSfand-instramentalities- 


ofethe:rSubjeefc0ffenses5-ineludingr^butrnotrlimited4o_ 


undertaking  a  cursory  inspection  of  all  emails  within  the  Subject  Account.  This  method  is 
analogous  to  cursorily  inspecting  all  the  files  in  a  file  cabinet  in  an  office  to  determine  which  paper 
evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other  methods  as 
well,  particularly  including  keyword  searches,  I  know  that  keyword  searches  and  similar  methods 
are  typically  inadequate  to  detect  all  information  subject  to  seizure.  As  an  initial  matter,  keyword 
searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated  with  emails, 
including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store  data  as 
searchable  text.  Moreover,  even  as  to  text  data,  keyword  searches  cannot  be  relied  upon  to  capture 
all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of  the  unique 
words  or  phrases  that  investigative  subjects  will  use  in  their  communications,  and  consequently 
there  are  often  many  communications  in  an  account  that  are  relevant  to  an  investigation  but  that 
do  not  contain  any  keywords  that  an  agent  is  likely  to  search  for. 

37.  Because  Cohen  and^^^are  attorneys,  the  review  of  the  content  within  the  Subject 
Accounts  will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law 
enforcement  personnel  involved  in  the  investigation,  including  attorneys  for  the  Government, 
collect  evidence  in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable 
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privilege.  When  appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate 
and  apart  from  the  investigative  team,  in  order  to  review  potentially  privileged  communications 
and  determine  which  communications  to  release  to  the  investigation  and  prosecution  team. 

IV.  Request  for  Non-Disclosure  and  Sealing  Order 

38.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not  publicly  known. 
As  a  result,  premature  public  disclosure  of  this  affidavit  or  the  requested  warrants  could  alert 
Gohen-that-rheAsmnderAnvestigatio%-nausing:rhimAo-destroy-evidMlce,-flee^Jcom-prosecution,jpr_ 


otherwise  seriously  jeopardize  the  investigation.  In  particular,  based  on  my  experience 
investigating  white  collar  cases,  including  cases  featuring  documents  such  as  agreements,  drafts 
of  agreements,  notes  of  conversations,  and  other  documentary  evidence,  premature  disclosure  of 
an  investigation  may  cause  the  target  of  the  investigation  to  attempt  to  destroy  or  conceal  such 
evidence.  In  addition,  as  also  set  forth  above,  Cohen  uses  computers  and  electronic 
communications  in  furtherance  of  his  activity  and  thus  could  easily  delete,  encrypt,  or  otherwise 
conceal  such  digital  evidence  from  law  enforcement  were  he  to  learn  of  the  Government’s 
investigation.  See  18  U.S.C.  §  2705(b)(3).  Cohen  also  appears  to  have  the  financial  means  that 
would  facilitate  his  flight  from  prosecution.  See  1 8  U.S.C.  §  2705(b)(2),  (5). 

39.  Accordingly,  there  is  reason  to  believe  that,  were  the  Providers  to  notify  the  subscriber 
or  others  of  the  existence  of  the  warrant,  the  investigation  would  be  seriously  jeopardized. 
Pursuant  to  1 8  U.S.C.  §  2705 (b),  I  therefore  respectfully  request  that  the  Court  direct  the  Providers 
not  to  notify  any  person  of  the  existence  of  the  warrant  for  a  period  of  180  days  from  issuance, 
subject  to  extension  upon  application  to  the  Court,  if  necessary. 

40.  For  similar  reasons,  I  respectfully  request  that  this  affidavit  and  all  papers  submitted 
herewith  be  maintained  under  seal  until  the  Court  orders  otherwise,  except  that  the  Government 
be  pei-mitted  without  further  order  of  this  Court  to  provide  copies  of  the  warrant  and  affidavit  as 
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need  be  to  personnel  assisting  it  in  the  investigation  and  prosecution  of  this  matter,  and  to  disclose 
those  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  this  matter. 

V.  Conclusion 

41.  Based  on  the  foregoing,  I  respectfully  request  that  the  Court  issue  the  warrants  sought 
herein  pursuant  to  the  applicable  provisions  of  the  Stored  Communications  Act,  18  U.S.C. 
-§-2-7Q3(b)(-b)(A)-(for-CQntents)  and-§-27-03(c)(l-)(AX(for-r-ecords-an(LotherJnfonnation'),-andihe. 
relevant  provisions  of  Federal  Rule  of  Criminal  Procedure  41. 


Special  Agent  Mason  Posilkin 
United  States  Attorney’s  Office 
Southern  District  of  New  York 


Sworn  to  before  me  this 
28th  day  of  February,  2018 


HONORABLE  GABRIEL  W.  GORENSTEIN 
Chief  United  States  Magistrate  Judge 
Southern  District  of  New  York 
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UNITED  STATES  DISTO.ICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 
l^gmail.com, 

II 

|i,  Maintained  at 
Premises  Controlled  by  Google,  Inc., 
USAO  Reference  No.  20I8R00127 


Search  Warrant  and  Non-Disclosure  Order 

TO:  Google,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 
■  Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agen^^^^^^^^^^of  the  United  States 
Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  accounts  ^^^^^|@gmail.com^^^^^gmail.com,  and 

maintained  at  premises  controlled  by  Google,  Inc.,  contain  evidence, 
fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachments  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies,  within  7  days  of  the  date 
of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  II  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in  Sections  III  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  serve  a  copy  of  this  Warrant  and  Order 
on  the  Provider  within  7  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be  seiwed  via 
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electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of  accepting 
service. 


2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
^xistence-Gf=thisA¥arranPand^©rder:to::thedisted=subseribe&orto-anyrOtheEpersomfoEra:rperi0d-of:.. 


180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


Date  Issued 


Time  Issued 


HONORABLE  GABRIEL  W.  GORENSTEIH 
Chief  United  States  Magistrate  Judge 
Southern  District  of  New  York 
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Email  Search  Attachment  A 
L  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
l@gmail.com  (the  “Subject  Account”)  for  the  time  period  referenced  below. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 


appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  If  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  14, 2017  and  the  date  of  this  warrant, 
inclusive. 


b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1,  2014  and  the  date  of  this  warrant,  inclusive. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 


wifcthe^Subjeet-Aeeormtpineluding  complaints, -inquiries7or=other~eontaets=with-suppoEtserviees-- 


and  records  of  actions  taken,  limited  to  items  sent,  received,  or  created  between  December  1,  2014 
and  the  date  of  this  warrant,  inclusive. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Account,  limited  to  items  sent,  received,  or  created  between  December  1, 2014  and  the  date  of  this 
warrant,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Account,  limited  to  items  sent,  received,  or  created 
between  December  1, 2014  and  the  date  of  this  warrant,  inclusive. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

TTT.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  ofviolations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 
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the  United  States),  1005  (false  banlc  entries);  1014  (false  statements  to  a  financial  institution),  1343  I 

I 

(wire  fraud),  and  1344  (banlc  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 

I 

if 

of  the  person(s)  who  created  or  used  the  Subject  Account;  | 

I 

I 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 

Bank,  Melrose  Credit  Union,  and/or  taxi  medallions;  ! 

gonrrnunicationspreeordspdocumentspancfother^Sles^nvolving-a^^planFproposal^oi^^ - - 

agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  t(m|||||mm||and/or 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 

LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of  | 

payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 

of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who  J 

communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  LLC,  j 

or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  j 

him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others,  j 

including  t(^^^^^^^^^|ind/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael  | 

D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
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institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

=:^=ri:;=Evidenee=indieatingAhe-Subjeet-Aeeount-=owner=s^intent-asr-it-relates=toAhe-Subjeet= 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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Email  Search  Attachment  B 

I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email 
account!^^^|@gmail.com  and  “Subject  Accormts”)  for  the  time 

-period-betweemQctober-l,-2016-and-the-date^o£this^warrant,_incIusive.- _  _ _ 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  persotmel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Accounts: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Accounts,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Accounts. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  address,  telephone 
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t 

f- 

I 

number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status,  5 

length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history.  | 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Accounts, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 

with  the  Subject  Accounts,  including  complaints,  inquiries,  or  other  contacts  with  support  services  j 

="aiid  records'^cyfaetrofflf  taker[r===== - —  -  -  - - —  - 

I 

I 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject  | 

Accounts. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §§371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  banlc  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Accounts; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 

agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  and/or  entities  associated 

with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 


"communieated=with=the-SubjeGt“Aeeounts=abouCanyTnatters-relatinghomny=plan-or-=proposal=or=^ 


agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  tc^^^^^^^^m^and/or  entities  associated 
with  him; 


d.  Communications  between  the  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Banlc,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Subject  Accounts  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  Subject  Accounts  owners’  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 


02.28.2018 


3 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  91  of  105 


IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Account 
^^|@aol.com,  Maintained  at 
Premises  Controlled  by  Oath,  Inc., 
US  AO  Reference  No.  2018R00127 


Search  Warrant  and  Non-Disclosure  Order 


TO:  Oath,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”)  . 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  |||||||||||||||||||||||^  of  the  United  States 
Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  account^^J@aol.com,  maintained  at  premises  controlled  by  Oath, 
Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachment  C 
hereto.  Accordingly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies, 
within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  11 
of  Attachment  C  hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in 
Sections  III  and  IV  of  Attachment  C.  The  Government  is  required  to  seiwe  a  copy  of  this  Warrant 
and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be 
served  via  electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of 
accepting  service. 
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2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 


meeessaryyexeept1:hat“Provider'may~disclose=this=Warrant=and-Order”to-an=^ttomey  for-Provider- 


for  the  purpose  of  receiving  legal  advice. 

3.  Sealing,  ft  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


Date  Issued 


Time  Issued 


HONORABLE  GABRIEL  W.  GORENSTEIN 
Chief  United  States  Magistrate  Judge 
Southern  District  of  New  York 
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Email  Search  Attachment  C 

I.  Subject  Account  and  Execntion  of  Warrant 

This  warrant  is  directed  to  Oath,  Inc.  (the  “Provider”),  headquartered  at  22000  AOL  Way, 
Dulles,  Virginia  20166,  and  applies  to  all  content  and  other  information  within  the  Provider’s 
possession,  custody,  or  control  associated  with  the  email  account ^^|@aoLcom  (the  “Subject 
Accoimt”)  for  the  time  period  between  December  1,2016  and  the  date  of  this  warrant,  inclusive. 

- ^A-law-enforcement-officer-wilTserve  this-warrant-by-transmitting-^it-yia-emaiLor-another 

appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  infoiTnation  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 
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d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

f.  Search  History.  All  search  history  and/or  web  history. 


~g“PrByerve<Aor-/)raefep=recGr<A'FAnypreserved-or  backup  copiesmPany  of  the^foregoing- 


categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(1)  or  otherwise, 
m.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  govermnent,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  ofviolations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  banlc  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following; 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to^^^^^^^^^|ind/or  entities  associated 
with  him; 
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c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  and/or  entities  associated 

with  him; 

==Tj~Communications=betweenA;he  -  Subj  eGCA;eeGunt=and"”others,-ineluding^employees"'on 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances;  and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Account 
maintained  at 

Premises  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
2018R00127 


=-==^--=-SEARCH-WARRANT-A]NT>  N©N=DIS€L©SHRE  @RDER==-^ 

TO:  1  &  1  Internet,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 
Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

•f  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 

I,  maintained  at  premises  controlled  by  1 
&  1  Internet,  Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  crime,  all  as  specified  in 
Attachment  D  hereto.  Accordingly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative 
Agencies,  within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in 
Section  II  of  Attachment  D  hereto,  for  subsequent  review  by  law  enforcement  personnel  as 
authorized  in  Sections  III  and  IV  of  Attachment  D.  The  Government  is  required  to  serve  a  copy 
of  this  Warrant  and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant 
and  Order  may  be  served  via  electronic  transmission  or  any  other  means  through  which  the 
Provider  is  capable  of  accepting  service. 


cause  to  believe  the  email  account 


1.  Warrant.  Upon  an  affidavit  of  Special  Agent 
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2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  wan'ant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 

^==^neeessar-y7:^exceptAhat-Provider=may=diselese-this-WarranCand^Order-to-anrattemey:f0r-Br0videi=-- .  -  -  - 

f0r  the  purpese  ef  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  imder  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated;  New  York,  New  York 


Date  Issued 


Time  Issued 


HONORABLE  GABRIEL  W.  GORENSTEEsf 
Chief  United  States  Magistrate  Judge 
Southern  District  of  New  York 


02,28.2018 
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Email  Search  Attachment  D 
1.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  1  &  1  Internet,  Inc.  (the  “Provider”),  headquartered  at  701  Lee 
Road,  Suite  300,  Chesterbrook,  Pennsylvania  19087,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
(the  “Subject  Account”)  for  the  time  period  between  November  14,  2017 
.and-the^datemLthis-warrantJnclusive - - - - — 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
infonnation  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 


-and=reGords^oPaetionsd:aken= - z::  ==-— -  - 

f.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise, 
ni.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §§371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 


02,28.2018 
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land/or 


medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to| 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  The  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the 
^pM"Scm(s)"^^==who-^eomfflunicated"with~the-Subjeet=Aceount”abGuCan5Fm:atters=TelatingTo~Bsaentia:l= 


Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  h^^^^^^^^^^and/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 


02,28.2018 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 


02.28.2018 
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i  j  }"A  j  1  ■■]  1  I  \  1  M 

AO  93  (SONY  Rev.  05/10)  Searctranis^izlire  Warrant ^ 


United  States  District  Court 

for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

A  Device  Containing  the  Resuits  of  Three  Email  Search 
Warrants,  See  Attachment  A 

SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)'. 

A  Device  Containing  the  Results  of  Three  Email  Search  Warrants,  See  Attachment  A 


The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  A 

I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 

'  /wr)/  tn  prr.p.p.B  14  rtn 


property. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 

'  (not  to  exceed  14  days) 

□  in  the  daytime  6:00  a.m.  to  10  p.m.  sT  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken.  >  i  |  '  ^ 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  0f  the  Court. 

^  Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk’pf  the  Court. 


;  .  :  :  UflmJrdtidls 

Sf  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U;S,C.  ^705^^(except  ^ 

of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person,  who, 'of  whose  property,  Ydil  be 
searched  or  seized  (check  the  appropriate  box)  pffor  30  days  (not  to  exceed  30).  ' . '  '  '  ,  - 

',/A)  ■ 

□until,  the  faplS)justifying,  the  latej^peci^c  d'ate  pf 

Date  and  time  issued:  Ctlr  ZSt 

'  /c)(^A« 

City  and  state:  New  York,  NY  ^  _ Hon.  Gabriel  W.  Gorensteln.  U.S.  Magistrate  Judge 


Printed  name  and  title 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  104  of  105 


Attachment  A 


I.  Device  to  be  Searched 

The  device  to  be  searched  (the  “Subject  Device”)  is  described  as  a  black  and  red  USB  drive 
with  a  white  label  that  says  “Tracking  #:  180208140208”,  which  contains  emails  and  other  content 
information  obtained  pursuant  to  the  three  search  warrants,  numbered  17-mj-00503,  17-mj-00855 
and  17-mj-00854,  obtained  by  the  Special  Counsel’s  Office  (“SCO”),  less  the  emails  that  were 
screened  and  removed  by  the  SCO’s  privilege  team. 

II.  Review  of  ESI  on  the  Subject  Devices 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under  government  control) 
are  authorized  to  review  the  ESI  contained  on  the  Subject  Device  for  evidence,  fruits,  and 
instrumentalities  of  one  or  more  violations  of  18  U.S.C.  §  371  (conspiracy  to  defraud  the  United 
States),  1005  (false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire 
fraud),  and  1344  (bank  fraud)  (collectively,  the  “Subject  Offenses”),  as  listed  below: 

a.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 


b.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to^^^^^^^^^^and/or 
entities  associated  with  him; 

c.  The  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the 

person(s)  —  who  communicated  with  ^^^^^^^^gmail.com  and/or  (the 

“Subject  Accounts”)  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to^^^^^^^^^^and/or  entities  associated  with  him; 

d.  Communications  between  the  Subject  Accounts  and  Jeffrey  Getzel  relating  to 
Michael  D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 
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e.  Evidence  indicating  the  owner  of  the  Subject  Accounts’  intent  as  it  relates  to  the 
Subject  Offenses  under  investigation. 
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UNITED  STATES  DISTRICT  COURT  ^ 
SOUTHERN  DISTRICT  OF  NEW  YORK 


,18  MAG  2877 


In  the  Matter  of  a  WaiTant  for  All  | 
Content  and  Other  Information  ; 
Associated  with  the  Email  Accormts  i 


TO  BE  FILED  UNDER  SEAL 


AGENT  AFFIDAVIT 


Premises  Controlled  by  Google,  Inc., 
US  AO  Reference  No.  2018R00127 


|i,  Maintained  at 


and 


Agent  Affidavit  in  Support  of  Application  for  a  Search  Warrant 
~  ioE  Stored  ElectroniECbmmnnications 


STATE  OF  NEW  YORK  ) 

)  ss. 

COUNTY  OF  NEW  YORK  ) 

Special  Agent  ^^^^^|of  the  United  States  Attorney’s  Office  for  the  Southern 
District  of  New  York,  being  duly  sworn,  deposes  and  states; 

L  Introduction 

1 .  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern  District 
of  New  York  (the  “US  AO”).  I  have  been  a  Special  Agent  with  the  US  AO  since  August  2016.  I 
previously  served  as  a  Special  Agent  with  tlae  United  States  Department  of  Labor  Inspector- 
General  from  May  2011  to  August  2016.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  aiTay 
of  financial  crhnes,  including  fi-auds  on  finarrcial  institutions.  I  also  have  trarning  and  experience 
executing  search  wari'ants,  including  those  authorizing  the  search  of  email  accounts. 

2.  I  make  this  affida-vit  in  support  of  an  application  for  a  search  warTant  pursuant  to  18 
U.S.C.  §  2703  for  all  content  and  other  rnformation  associated  with  the  email  accounts 


(the  “Subject 


lgmail.com, 


Accounts”),  maintained  and  confiolled  by  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
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Amphitlieatre  Peu'l^ay,  Mountain  View.  California  94043.  The  information  to  be  searched  is 
described  in  the  following  paragraphs  and  in  Attachments  A  and  B  to  the  pioposed  wai  rant. 

3.  On  or  about  February  28,  2018, 1  submitted  an  Affidavit  in  support  of  an  application 


for  a  search  wanant  pursuant  to  18  U.S.C.  §  2703  for  all  content  and  other  infoimation  associated 
with  tie  Subject  Accounts  maintamed  and  controlled  by  the  “Provider,  a  true  and  comect  cop,  of 


which  is  attached  hereto  as 


Exhibit  A  (the  “Original  Affidavit”),  and  which  is  incorporated  by 


reference  as  if  fully  set  forth  hei  ein. 

4,  oTthat  same  date,  the  Honomble  Gabriel  W.  Oorenstein,  United  States  Magisttate 
Judge,  issued  a  search  warrant  for  the  requested  data,  a  true  and  correct  copy  of  which  is  attached 


hereto  as  Exhibit  B  (the  “Original  Search  Warrant”).  Shortly  thereafter,  the  Provider  was  served 
with  tire  Original  Search  Warrant.  On  or  about  March  7,  201 8,  the  Provider  provided  a  response 
to  the  Original  Search  Wanmt  Tliat  return  was  incomplete  because  the  Provider  declined  to 


produce  data  that  it  stored  on  computer  servers  located  outside  of  the  United  States.  It  is  my 
understanding,  fi'om  speaking  with  the  Assistant  Umted  States  Attorney  assigned  to  this  matter  as 
well  as  other  law  enforcement  agents,  that  the  Provider’ s  refusal  to  provide  foreign  stored  data  was 
in  hglrt  of  the  Second  Cireuifs  decision  in  which  it  held  that  Microsoft  Corporation  was  not 
required  to  produce  foreign  stored  data  pm-suant  to  a  waiTant  issued  imder  the  Stored 
Communications  Act.  Sea  MaUer  of  Wanant  to  Search  a  Certain  E-Mail  Account  Controlled  and 
Maintained  by  Microsoft  Corporation.  829  F.3d  197  (2d  Cir.  2016),  cert,  granted  138  S.  Ct.  356 


(2017)  (the  “Microsoft  Litigation”). 


ALoririLlAffidavit  also  sought  content  infoimation  for  two  additional  email  accounts  hosted 
by  tLs  affidavit  only  requests  a  search  warrant  with  respect  to  the  Subject 


Accounts  described  herein. 


2017.03-25 
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5.  On  March  23,  2018,  the  Clarifying  Lawful  Overseas  Use  of  Data  Act  (the  ‘‘CLOUD 

Act”)  was  enacted  and  became  law.  The  CLOUD  Act  clai'ifies  that  in  responding  to  legal  process 

issued  under  tlie  Stored  Communications  Act,  providers  are  required  to  disclose  data  even  if  it  is 

stored  abroad.  Specifically,  section  103  of  the  CLOUD  Act  amended  18  U.S.C.  §  2713  as  follows; 

§  2713.  Required  preservation  and  disclosure  of  communications  and  records 
A  provider  of  electronic  communication  service  or  remote  computing  service  shall  comply 
with  the  obligations  of  this  chapter  to  preserve,  backup,  or  disclose  tire  contents  of  a  wire 
or  elech'onic  communication  and  any  record  or  other  infoimation  pertaining  to  a  customer 
or  subscriber  within  such  provider’s  possession,  custody,  or  conti'ol,  regai'dless  of  whether 

_ such  communication,  record,  or  other  infonnation  is  located  witbin-onoutside  of  the  United.. 

States. 

6.  From  my  backgmund,  haining,  and  experience  hr  this  investigation  and  in  others,  I 
know  that,  in  general,  any  email  (which  can  include  attachments  such  as  documents,  images,  and 
videos)  sent  to  or  from  a  subscriber’s  account,  or  stored  in  draft  form  in  the  account,  is  maintained 
on  the  Provider’s  seiwers  unless  and  until  the  subscriber  deletes  die  email.  If  the  subscriber  does 
not  delete  the  email,  it  can  remain  on  the  Provider’s  computers  indefinitely.  Even  if  the  subscriber 
deletes  the  email,  it  may  continue  to  be  available  on  the  Provider’s  seiwers  for  a  ceitain  period  of 
time.  In  addition,  fi'om  my  review  of  other  search  waiTant  returns  in  this  investigation,  I  Imow  that 
the  subjects  of  the  investigation  maintained  email  data  relevant  to  the  investigation  in  email 
accounts  for  many  months  after  the  email  was  sent  or  received. 

7.  Accordingly,  I  respectfully  submit  this  Affidavit  seeking  the  issuance  of  the  attached 
proposed  seai'ch  warcant  which  seeks  the  same  data  as  was  sought  in  the  Original  Search  Wairant, 
for  the  reasons  set  foifh  in  the  Original  Affidavit  and  herein, 

n.  Request  for  Non-Disclosure  and  Sealing  Order 

8 .  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not  publicly  known. 

As  a  result,  premature  public  disclosure  of  this  affidavit  or  the  requested  warrants  could  alert  target 
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subject  Michael  Cohen  that  he  is  under  investigation,  causing  him  to  destroy  evidence,  flee  fioin 
prosecution,  or  otherwise  seriously  jeopardize  the  investigation.  In  pariicular,  based  on  my 
experience  investigating  white  collar  cases,  including  cases  featuring  documents  such  as 
agreements,  drafts  of  agreements,  notes  of  conversations,  and  other  documentai'y  evidence, 
premature  disclosm-e  of  an  investigation  may  cause  the  target  of  the  investigation  to  attempt  to 
destroy  or  conceal  such  evidence.  In  addition,  as  set  forth  in  the  Original  Affidavit,  Cohen  uses 
computers  and  electi'onic  comnruni  cations  in  furtherance  of  his  activity  and  thus  could  easily 
delete,  encrypt,  or  otherwise  conceal  such  digital  evidence  from  law  enforcement  were  he  to  learn 
of  the  Government’s  investigation.  See  18  U.S.C.  §  2705(b)C3).  Cohen  also  appears  to  have  the 
financial  means  that  would  facilitate  his  flight  from  prosecution.  See  18  U.S.C.  §  2705(b)(2),  (5). 

9.  Accordingly,  there  is  reason  to  believe  that,  were  the  Provider  to  notify  the  subscriber 
or  others  of  the  existence  of  the  wairant,  the  investigation  would  be  seriously  jeopai'dized. 
Pursuant  to  1 8  U.S.C.  §  2705(b),  I  tlierefore  respectfully  request  that  the  Court  dhect  the  Provider 
not  to  notify  any  person  of  the  existence  of  the  wan-ant  for  a  period  of  180  days  from  issuance, 
subject  to  extension  upon  application  to  the  Court,  if  necessary. 

10.  For  similai-  reasons,  I  respectfully  request  that  this  affidavit  and  all  papers  submitted 
herewith  be  maintained  under  seal  until  the  Court  orders  otheiwise,  except  that  the  Government 
be  permitted  without  further  order  of  tliis  Court  to  provide  copies  of  the  waiTant  and  affidavit  as 
need  be  to  personnel  assisting  it  in  tire  investigation  and  prosecution  of  this  matter,  and  to  disclose 
those  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  this  matter. 
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III.  Conclusion 

11.  Based  on  the  foregoing,  I  respectfully  request  that  the  Court  issue  the  warrant  sought 
herein  pursuant  to  the  applicable  provisions  of  the  Stored  Communications  Act,  18  U.S.C, 
§  2703(b)(1)(A)  (for  contents)  and  §  2703(c)(1)(A)  (for  records  and  other  hifoimatiou),  and  the 
relevant  provisions  of  Federal  Rule  of  Criminal  Procedure  41 . 


United  States  Attorney's  Uttice 
Southern  District  of  New  York 


Sworn  to  before  me  this 

day  of  April,  2018 


HONORA^S  .HENRY  B.  PITMAN 


United  States  Magistrate  Judge 
Southern  District  of  New  York 
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UMTED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORIC 


In  the  Matter  of  a  Wairant  for  All 
Content  and  Other  Inforination 


A  H.conigfffd  with  the  Email  Accounts 
l@gmail.comj 
|@gmail,com,  and 

Maintained  at 

Premises  Conh'olle^j^Goode^c.j 
the  Email 

Maintained  at  Premises  ConhoUed  by 
-  -Oath,  InCij  and-the Email Accomit 

tnaintaiaed 

Premises  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
201SR00127 


TO  BE  FILED  UNDER  SEAL 
AGENT  AFFIDAVIT 

18  MAG  169  6 


Agent  Affidavit  in  Support  of  Application  for  a  Search  Warrant 
for  Stored  Electronic  Communications 


STATE  OF  NEW  YORK  ) 


)  ss. 


COUNTY  OF  NEW  YORK  ) 
Special  Agent 


the  United  States  Attorney’s  Office  for  the  Southern 
District  of  New  York,  being  duly  sworn,  deposes  and  states: 

I.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  die  United  States  Attorney’ s  Office  for  the  Southern  District 
of  New  York  (the  “USAO”).  I  have  been  a  Special  Agent  with  the  USAO  since  August  2016.  I 
previously  served  as  a  Special  Agent  wiffi  the  United  States  Department  of  Labor  Inspector 


General  from  May  2011  to  August  2016.  In  the  coui'se  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
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of  financial  crimes,  including  fiauds  on  financial  institutions,  I  also  have  fiaming  and  experience 
executing  search  wairants,  including  those  authorizing  the  search  of  email  accounts. 

B.  The  Provider,  the  Subject  Account  and  the  Subject  Offenses 

2.  I  make  this  affidavit  in  support  of  an  application  foi"  a  search  warrant  pursuant  to  18 

U.S.C.  §  2703  for  all  content  and  other  infoimation  associated  with  the  email  accounts 
^^^^^^^@gmail.com  (the  “^Coheji  Account”),  (the  “MDCPC 

-(the 

anc^^l^aolcom  (the  ^^^^ccount”)  (collectively,  the 

“Subject  Accounts”).  The  Cohen  Account, 

Account  are  maintained  and  controlled  by  Google,  Inc.,  headquartered  at  1600  Amphitheatre 
Parkway,  Mountain  View,  California  9404-3  (“Google”),  the  MDCPC  Account  is  maintained  and 
controlled  by  1  &  T  Internet,  Inc.,  headquartered  at  701  Lee  Road,  Suite  300,  Chesterbinok, 
Pennsylvania  19087  (“1  &  1”),  and  Account  is  maintained  and  controlled  by  Oath,  Inc., 

22000  AOL  Way,  Dulles,  Virginia  20166  (“Oath”)  (together,  the  ‘Providers”).  The  information 
to  be  searched  is  described  m  the  following  paragraphs  and  in  Attachments  A,  B,  C  and  D  to  the 
proposed  warrants , 

3 ,  As  detailed  below,  them  is  probable  cause  to  believe  that  the  Subject  Accounts  contain 
evidence,  fi'uits,  and  instrumentalities  of  violations  oflSU.S.C,  §371  (conspiracy  to  defl’andthe 
United  States),  1005  (false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fi'aud),  and  1344  (banlc  finud)  (collectively,  the  “Subject  Offenses”).  The  Target  Subjects  of 
this  investigation  axe  MICHAEL  COHEN  (“Cohen”)  and  otiiers  known  and  unknown.  This 
affidavit  is  based  upon  my  personal  Icnowledge,  my  review  of  documents  produced  pm'suant  to 
grand  jury  subpoenas  and  prior  search  wairants,  my  I'eview  of  interview  reports  prepared  by  other 
law  enforcement  officers,  and  my  conversations  with  other  law  enforcement  officers,  as  well  as 


xconnt,  andl 


Account-), 


l^gmail.com  (the— I 


l4.ccDimt”),! 
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,  fo,  the  United  PU..PO.  of  es-ahin,  paodaWo  oauao,  it  does  not  taclsaie  aU 

ftefa«3lhaveIeanteddtn'ingmyinvesltgata.Whereteoot,t«atsofdoo— 

stat^ents,  and  codvetsations  of  ottats  ate  tepotted  heteta,  ttoy  ate  tepotfed  Ut  substance  apd  «t 

part,  except  wliere  otherwise  indicated. 

C.  Services  and  Records  of  the  Provider 

_ 4,  I  have  learaed-the  foUowing  about  the  Providers^ 

'  a  Tto  Providers  offer  email  services  to  Are  pubUo,  In  particulax,  Google  permits 

aaAscrrbers  .o  maintain  email  acoomtts  under  ^e  domain  name  gm^.eom.  Google  also  ailows  a 

'  subscriber  to  mabrtaln  email  aceotmts  under  any  domain  name  under  the  subsCber's  conAoi.  For 

Google  enables  tbe  subscriber 

example,  if  a  subscriber  controls  the  domain 

m  bos.  any  enrad  address  rmdet  this  domain  name  on  s^ers  operated  by  Google.  Oada  pemuts 

,nbscrlb«tom.brtabremal.aoooun.sundm.redomab.nameaol.com.l.lpermltssnbsc^ 

m  rnalnmln  email  accormts  under  any  domain  name, unde.,  the  subsorlbefs  oonbol.  For  e»mple, 

1  &  1  enables  the  subscriber  to  host  any 

if  a  subscriber  controls  the  domain  name  -  , 

Uvr  -1  s?r  1  A  subscriber  using  the 

email  addmss  under  this  domain  name  on  seiveru  operated  by  1  . 

.....  bis  or  her  email  account  from  any  computer  connected  to  the 
Providers’  services  can  access  his  or 


Internet. 

b.  The 
subscriber  account. 


Provides  mafataiutbefoIlowinErecords  and  information  vrith  respect  to  every 


as 


i  Ml  oonmts.  In  general,  any  emaU  (which  can  iuelude  attaehments  such 

doeumen.,  huages!  and  videos,  sent  to  or  horn  a  suhsetlber..  aecount,  or  smred  .  dra^ 

.dmaeeouuUs.ha..aluedoutheProvlders.serversu„lessandtmtlldtesuhscrlhe^^ 
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mdefinitely.  Even  if  the  subscriber  deletes  the  email,  it  may  continue  to  be  available  on  the 

Provider  *  s  servers  for  a  certain  period  of  time. 

ii.  Address  book  '  The  Providers  also  allow  subscribers  to  maintain  the 

equivalent  of  an  address  book,  comprising  email  addresses  and  other-  contact  infonuation  of  other- 
email  users. 

iii.  Subscriber  and  billing  information.  Tire  Providers  collect  and  maintain 
-  Ctypicallyunverified)  xdentifying-information  about  each  subscriber-,  mduding,  for  example,  name, 

username,  address,  telephone  number,  and  alternate  email  addresses.  The  Providers  also  maintain 
records  concerning  the  date  on  which  the  account  was  created,  the  Internet  protocol  (“IP”)  address 
of  the  user  at  the  time  of  account  creation,  the  current  status  of  the  account  (e.g.,  active  or  closed), 
the  length  of  service,  and  the  types  of  services  utilized  by  the  subscriber.  Additionally,  for  paying 
subscribers,  the  Providers  maintain  records  of  the  subscriber’s  means  and  source  of  payment, 

including  any  credit  card  or  bank  account  number. 

iy,  jyvTisdctijonal  infomation.  The  Providers  also  typically  retain  ceitain 

transactional  information  about  the  use  of  each  account  on  its  system.  This  infoi-mation  can  include 
records  of  login  (i.e.,  session)  times  and  durations  and  the  methods  used  to  connect  to  the  account 
(such  as  logging  into  the  account  through  the  Providers’  website), 

V.  Customer  correspondence.  The  Providers  also  typically  maintain  records 
of  any  customer  service  contacts  with  or  about  the  subscr-iber,  including  any  inquiries  or 

complaints  concerning  the  subscriber’s  accoimt. 

vi.  Search  history.  Google  and  Oath  also  typically  maintain  records  of  any 

search  history  or  web  histor-y  associated  with  the  subscriber’s  account. 


02.28, 
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vii.  Associated  content.  Google  also  typically  maintains  content  and  records 
relating  to  the  following  applications  that  are  associated  witli  its  e-mail  acconnts:  (A)  Google 
Docs,”  wliich  provides  docnment-editing  software  that  can  be  used  to  create,  share,  store,  and 
manage  documents  online;  (B)  "Google  Drive,”  wliich  enables  users  to  store  files  on  Google 
servers,  where  they  can  be  accessed  remotely  by  the  user  and  others;  and  (C)  “Gchat  or  Instant 
Messenger,”  which  provides  a  chat  interface  through  which  users  can  communicate  with  each 
■other  in  real  time.-  Gath  also  typically  maintains- content  and  records  relating  to  AOL  instant- 
message,  which  provides  a  chat  interface  tlnough  which  users  can  communicate  with  each  other 

m  real  time. 

viii,  Preserved  and  backup  I'ecords.  The  Provider's  also  maintain  preseived 
copies  of  the  foregoing  categories  of  records  with  respect  to  an  account,  for  at  least  90  days,  upon 
receiving  a  preseivation  request  firom  the  Government  pursuant  to  18  U.S,C.  §  2703(1).  The 
Providers  may  also  maintain  backup  copies  of  the  foregoing  categories  of  records  pm'suant  to  its 

own  data  retention  pohey. 

D.  Jurisdiction  and  Authority  to  Issue  Warrant 

5.  Pni'suantto  18  U.S.C.  §§  2703(a).  (b)(1)(A)  &  (c)(1)(A),  the  Government  may  require 

a  provider  of  an  elech'onic  communications  seivice  or  a  remote  computing  service,  such  as  the 
Providers,  to  disclose  aU  stored  content  and  aU  non-content  records  or  other  infoi-mation  pertaining 
to  a  subsci'iber,  by  obtaining  a  warrant  issited  using  the  procedures  described  in  the  Federal  Rules 
of  Criminal  Procedui'e. 

6.  A  search  warrant  under  §  2703  may  be  issued  by  “any  distiict  comt  of  the  United  States 
(including  a  magistrate  judge  of  such  a  court)”  that  “has  jurisdiction  over  tlie  offense  being 
investigated.”  18  U.S.C.  §  2711(3)(A)(i). 
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7.  When  the  Government  obtains  records  under  §  2703  pursuant  to  a  sear  ch  warrant,  the 
Government  is  not  required  to  .notify  the  subscriber  of  the  existence  of  the  warrant,  18  U.S.C. 

§  2703Ca),  Cb}(l)(A),  (c)(2)  &  (3).  Additionally,  tire  Government  may  obtain  an  order  precluding 
the  Provider  from  notifying  the  subscriber  or  any  otlier  person  of  the  warrant,  for  such  period  as 
the  Court  deems  appropriate,  where  there  is  reason  to  believe  that  such  notifrcation  will  seriously 
jeopardize  an  investigation,  18  U.S.C,  §  270S(b). 

-  E.  Prior  Applications 

8.  On  m-  about  July  1 8, 20 1 7,  hi  connection  with  an  investigation  being  conducted  by  the 
Office  of  the  Special  Counsel  (“SCO”),  the  Federal  Bureau  of  Investigation  ('TBPO  sought  and 
obtained  ftom  the  Honorable  Beryl  A.  Howell,  Chief  United  States  District  Judge  for  the  District 
of  Columbia,  a  search  warrant  for  emails  in  the  Cohen  Account  sent  or  received  between  Januai7 
1,  2016  and  July  18,  2017.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  from 
Judge  Howell  search  wai-rants  for  emails  in  the  Cohen  Account  sent  or  received  between  June  1, 
2015  and  November  13,  2017,  and  emails  in  -the  MDCPC  Account  sent  or  received  between  the 
opening  of  the  account  and  November  13,  2017.  The  SCO  has  since  refemed  certain  aspects  of 
their  investigation  into  Cohen  to  the  USAO,  which  is  worldng  with  tire  FBFs  New  York  Field 
Office.  As  part  of  that  referral,  the  SCO  provided  the  USAO  with  emails  and  other  content 
infoimation  obtained  pursuant  to  the  search  waiTants  executed  by  the  SCO,  which  had  afready 
been  reviewed  for  privilege.  *  As  discussed  below,  this  affidavit  is  based  in  part  on  my  review  of 


^  In  an  abundance  of  caution,  in  a  separate  application  the  USAO  has  sought  authorization, 
uursuant  to  Fed.  R.'  Ciim.  P.  41,  to  review  the  emails  obtained  pursuant  to  the  Prior  CohenAccount 
Warrants:  fo,  ^idence  related  to  certain  additional  conduct  ttet  was  not  tire  focus 
Cohen  Account  Wanants.  The  emails  obtained  fi’om  the  Prior  Cohen  Account  Wanants  that  ielate 
to  that  additional  conduct  do  not  fonn  a  basis  for  die  instant  application. 
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responsive  materials  produced  pmsuairt  to  the  July  18  and  November  13, 2017  waixauts  (the  “Prior 
Cohen  Account  Warrants”). 

9.  On  or  about  November  7, 2017,  and  January  4, 2018.  as  well  as  certain  prior  dates,  the 
SCO  sought  and  obtained  from  Judge  Howell  orders  authoiizing  and  extendingthe  installation  and 
use  of  pen  registers  and  hap  and  trace  devices  to  record  communications  sent  to  or  from  the  Cohen 
Account,  The  SCO  has  provided  pen  register  data  obtained  pursuant  to  those  orders  to  the  US  AO. 

This  affidavit,  as  discussed  below,  is  based  in  part  on  my  review  of-the-pen  register- data  obtained- 

pm-suant  to  the  November  7,  2017  and  January  4, 2018  orders  (the  "Pen  Register  Data”). 

10.  On  or  about  February  16,  2018,  the  USAO  sought  and  obtained  from  the  Honorable 
Debra  Freeman,  United  States  Magistrate  Judge  for  the  Southern  District  of  New  York,  an  order 
pursuant  to  18  U.S.C.  §  2703 (d)  for  email  header  mfonnation  associated  with  the  MDCPC 
Account.  Tins  affidavit,  as  discussed  below,  is  based  in  part  on  my  review  of  email  header 
information  produced  by  1  &  1  in  response  to  that  order  (the  ‘TvlDCPC  Header  Information”), 

n.  probable  Cause 
A.  Overview 

1 1 .  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  FBI  are 
investigating,  among  other  things,  a  scheme  by  Target  Subject  Michael  Cohen  to  defraud  multiple 
batrlcs.  Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  Presrdent 
Donald  Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  rrr  the  Trump 
Organization,  an  mternational  conglomerate  with  real  estate  and  other  holdings. 

12.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations  in 
and  omitted  .material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banks  in  connection  witli  a  transaction  intended  to  relieve  Cohen  of 
approximately  $22  miUron  in-  debt  he  owed  on  taxi  medallion  loans  fi’om  the  banlcs.  As  set  forth 


02,28.2018 


7 


Case  l:18-cr-00602-WHP  Document  48-5  Filed  07/18/19  Page  14  of  73 


iu  detail  below,  iii  these  finaticial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appeal's  to  have  (i)  intentionally  omitted  cash  assets  that  he  began  receiving  in  2017 
fi'om  new  consulting  work;  (ii)  significantly  luiderstated  his  toial  holdings  of  cash  and  cash 
equivalents;  and  (iii)  failed  to  iiifonn  the  banks  fom  which  he  was  seeking  debt  relief  that  he  had 

agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party, 

acquisifon  of  the  taxi  medallions  securing  Cohen’s  debt.  By  making  these 
misrepresentations  and  material -omissions,  Cohen  avoided- maldng  montlrly  payments  on  his 
loans,  and  attempted  to  and  had  secured  proposed  agreements  f  om  the  banlcs  to  relieve  him  of 


ill  comiectioD  with 


certain  repayment  obligations  worth  millions  ot  dollars, 

13,  Based  on  my  review  of  emails  obtained  from  die  Prior  Cohen  Accoimt  Warrants, 
MDCPC  Header'  Information,  and  documents  produced  pui’suant  to  subpoenas,  I  have  learned  that 
Cohen  has  used  the  Cohen  Account  and/or  MDCPC  Account  to,  among  other  things,  CO 
commumcate  attorney, 

about  the  proposed  transfer  of  Cohen’s  medallions  and  associated  debts;  (ii)  negotiate  a  pay-down 


of  the  principal  amount  of  the  taxi  medallion  loans;  (hi)  communicate  with  his  accountant  about 
the  contents  of  the  false  financial  statements  at  issue;  and  (iv)  send  those  false  financial  statements 
Additionally, 

Account^^^^^^^^^^ccount  an^^^|rocount,  respectively,  to  communicate  with  Cohen 
about  the  status  of  the  taxi  medallion  transaction,  and  to  send  relevant  financial  statements  to 
banks.  Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that 


the  Subject  Accounts  will  include  evidence  of  the  Subject  Offenses. 

B.  Cohen’s  Statements  to  Sterling  National  Bank 

14.  As  set  foi-th  in  detail  below,  in  2014,  Cohen,  thinugh  limited  UabiUty  corporations 

('‘LLCs”)  controlled  by  him  and  his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  fi:om  Sterling 
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National  Banlc  ("Sterling”)  and  the  Melrose  Credit  Union  ("Melrose”),  secured  by  taxi  medallions, 
for  approximately  $20  million.  Though  entered  into  by  LLCs,  the  loans  were  also  secured  by 
personal  guarantees  in  the  names  of  both  Cohen  and  his  mfe.  Over  time,  as  the  taxi  industiy 
weakened  and  the  medallions  were  devalued,  Cohen  sought  to  renegotiate  the  terms  of  those  loans 
and/or  relieve  hhnself  from  their  obligations,  including  the  personal  guai'antees.  As  part  of  that 
effort,  Cohen  made  a  series  of  representations  to  Sterling  and  Meh’ose  about  his  net  worth,  assets, 
available  cash,  and  financial  outlook.  Specifically,  based  on  my  review  of-records  maintained  by- 
Sterling  and  Mehnse.  and  public  sour'ces  concerning  the  taxi  industry  and  the  value  of  taxi 
medallions,  as  well  as  my  review  of  reports  prepared  hy  law  enforcement  officers  of  interviews 
with  a  Sterling  executive  vice-pr-esrdent  (the  “Sterling  Employee-1”)  and  my  participation  in  an 
hiterview  with  a  Sterling  employee  (the  "Sterling  Employee-2”),  I  have  learmed,  among  other 
things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medaUion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medaUions  (each  LLC  owns  two 
medallions).^  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  from  Capital  One  Bank,  for  which  the  medallions  seiwed  as  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medaUions  to  a  third  party.  That  thfrd  party  made  monthly  payments  to 

Cohen,  who  in  turn  used  some  of  Uiose  proceeds  to  pay  his  montlUy  irayfrreiits. 

'  If' 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterlmg,  wheti  he  sought  to  refinance  a 
mortgage  on  a  rental  propei'ty  that  he  owned.  In  or  ar’ound  April  2014,  Cohen  raised  with  Sterling 


2  One  of  tliese  companies,  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
beheve  is  Cohen’s  mother. 
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the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One  Bank.  By  in 
or  about  September  2014,  Cohen  began  negotiating  a  lending  tL-ansactioii  with  Sterling  that  would 
allow  Cohen  to  pay  off  his  loans  at  Capilal  One  and  boixow  more  money  from  the  then-increase  in 
value  of  the  medaUions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval 
in  the  taxi  industry— as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber— taxi 
medallion  loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  madeet  value 
■  of  taxi  medallions  was  consistently  rising.  Consequently,-  taxi  medallion  loans  -like  the  loans  held  - 
by  Cohen— were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee-1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 
and  used  the  additional  funds  for  other  purposes,  Cohen  appeal's  to  have  followed  this  approach  m 
2014,  when-  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which 
accordiig  to  letters  fiom  Capital  One  Bank  in  Sterling's  files—was  greater  than  his  previous  debt 
at  Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This 
allowed  Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8,  2014,  each  of  Cohen’s  sixteen  taxi  medallion  corporations  entered  into  loan 
agreements  and  promissory  notes  with  Sterling  for  the  principal  sum  of  $1,375,000,  with  repayment 
dire  on  December  8,  2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who 
was  the  sole  shareholder  of  the  corporation.  The  loans  were  also  each  secured  by  a  security 
agreement,  dated  the  same  day,  maldng  the  medallions  collateral  for  the  notes.  To  give  Sterling 
additional  security,  Michael  and  Laum  Cohen  signed  personal  guarantees  and  confessions  of 
judgment,  giving  Sterling  the  right  to  pumue  collection  against  the  Cohens’  personal  assets  were 
their  corporations  to  default  under  the  loan  agreements,  in  total,  Sterling  agreed  to  lend 
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approximately  $22  million  to  the  Cohens’  companies,  Pmsnaiit  to  participation  agreements, 
Sterling  ti-ansferred  45  percent  of  that  debt  to  Mehose.  ^  Under  the  terms  of  Sterling’ s  participation 
agreements  with  Melrose,  Sterling  was  precluded  fi'om  amending  or  modi^ing  the  loans  without 
the  consent  of  Melrose. 

d.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions.  Sterling  (and 
Mekose,  consistent  with  its  participation  in  the  deal)  conducted  diie  diligence.  At  Sterling’s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial-condition,  dated  August- 1-,  2014- 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000,* *  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  know  that  Sterling  viewed  the 
transaction  favorably  because,  accounting  for  loan  payments,  cash  flows  from  the  medallions  were 
projected  to  be  positive,  the  value  of  the  coUateral  (as  estimated  by  Sterling)  exceeded  $42  mUlion, 
and  the  net  worth  of  Cohen— who  was  the  direct  obligor  under  the  guarantee  agreements— was 
over  $77  million.  An  intemal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  file  same  reasons, 

e.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  bacldng  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies  and  significant  devaluation  of  taxi  medallions.  Additionally, 
Cohen  began  falling  behind  on  loan  payments  to  Sterling  and  Melrose.  I  know  ftom  records 

—  maintained’by  Sterling  and  an  interview  with  Sterling  EmpIoyee-2  that;,  beginning  in  or  aremid 

^  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  m 
conseivatorsliip  by  tlie  National  Credit  Union  Administration  (‘TSTCUA”). 

*  Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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September  2015,  Cohen  told  Sterling,  in  sum  and  substance,  that  the  individual  leasing  Cohen’s 
medallions  had  fallen  behind  in  malting  payments  to  Cohen,  and  that  as  a  result,  the  monthly  cash 
flow  from  his  taxi  medallions  had  been  reduced,  leaving  him  witli  a  shortfall  of  approximately 
$16,000  each  month.  For  instance,  I  have  reviewed  an  email  finm  Sterling  Employee-2,  dated 
September  9, 2015,  siunmarizing  a  call  widi  Gohpn— which'  according  to  the  email  and  toll  records 
for  Coheir’s  cellphone  occmted  on  September  8,  2015—- during  winch  Cohen  told  Sterling 

-Employee-2,  in  sum  and  substance,  about  his  cash-flow  problems  and  a-monthly  shortfall  of  - - 

approximately  $  1 6,000 ,  In  that  same  email,  Sterling  Employee-2  commented  that  despite  Cohen  s 
statements,  his  personal  financial  information  “indicatefd]  a  strong  ability  to  malce  up  the  difference 
in  payments.”  Cohen,  however,  according  to  Stei-ling  Employee-2,  pushed  the  banlc  for  a  reduction 
in  Cohen’s  inontlily  payments. 

f.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
interview  with  Sterling  Employee-2, 1  have  learned  that  Cohen  and  Sterling  EraployeB-2  spoke 
again  on  September-  28, 2015,  and  that  during  tire  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I  j 

know  fi'om  my  review  of  records  maintained  by  Sterling  tliat  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility— both  hitemally  and  with  Cohen— of  Cohen 
posting  his  real  estate  holdings,  personal  i-esidence,  or  some  other  collateral  as  additional  security 
forthe  banks,  Accordingto  these  records,  however,  Coheiiresisted  these  requests.  Fr-ommyrevlew 
of  loan  documents  and  records  maintained  by  Sterling,  I  know  that  hr  or  about  November  20 1 5,  as  i 

a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his  medallions  to 
cover  monthly  interest  payments.  Sterling  and  Mehose  agreed  to  amend  then  loans  with  Cohen  by. 
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aiBong  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extending  the  loan 
maturity  date  to  December  8, 2017, 

g.  I  Icnow  &om  interviews  with  Sterling  Employee-1  and  Sterling  Employee-2,  as  well 

as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterluig  EmpIoyee-1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named^^^^^^^^  who  would  agree  to 
assume  Cohen’s  debt  with  Sterling  and  Mekose.  Based  on  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee-1  and  -Steiimg  Employee-2  referenced 
above,  I  Imowthatby  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
corporate  taxi  medallions  to  who  is  a  medallion  owner  and  taxi  operator,  for  the 

balance  of  the  loans,  which  at  tlie  time  was  $21,376,000.  I  blow  ftom  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  the  hansfer  of  the  medalhon  loans  -and  because  Sterling  was  unfamihar 
^^^^^|-Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  ti'ansfer,  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3  i,  2017,  Cohen  told  Sterling  Employee-1,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  m  order-  to  move  foi-wai'd  with  the  medallion 
transfer  deal  witl^^^^^^|  Indeed,  in  an  email  sent  fiom  the  Cohen  Account  to  Sterling 
Employee-2  on  or  about  Febmaiy 22, 2017,  Cohen  confu-medthathe  “agreed to  pay  down  1  million 
fi'om  the  loan  amount.” 

h.  Pursuant  to  the  participation  agreements  between  Sterling  and  Mekose,  Sterliag 

was  required  to  secure  Mekose’ s  agreement  to  participate  in  the  Uansfer  of  the  taxi  medallion  debt 
kom  Cohen  to  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Mekose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
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Mekose  agree  to  the  teims.  On  or  about  May  2j  201 7,| 


lemailed  Sterling 


Employee- 1  from  the 
Stei'Ihig  Employee- 1  responded  to 
Melrose  had  agi'eed  to  the  deal,  and  that  Sterling  would  be  sendingl 


l^-ccount  to  intjuii'e  about  the  status  of  the  transaction. 


Account  that 
tenn  sheet 


shortly. 

i.  In  order  for  the  banks  to  evaluate  the  proposed  transaction  hilly,  they  requested 

financial  information  fi-omthepaittes,  Onor  about  October  26, 2016,  a  Sterling  employee  emaUed 

Account  about  the  “Cohen  MedalUon  Purchase,”  and  stated  “[i]n  order  to 

proceed  with  the  assumption  of  MichaePs  loans  ”  Sterling  needed  certahi  financial  information 

copying 

tht^^^^^^^^^^^^Account,  that  he  would  send  a  financial  statement  and  tax 
returns  shortly.  Additionally,  on  or  about  June  7,  2017,  Sterling  Eraployee-l  emailed  Cohen  to 
request  an  “updated  personal  financial  statement,’’  completed  jointly  with  Cohen’s  wife,  and 
Cohen’s  most  recent  federal  income  tax  retuna.  On  or  about  June  8, 2017,  Cohen  emailed  Sterling 
Employee-l  from  the  Cohen  Account,  attaching  a  Sterling  personal  financial  statement  fomo  that 
had  been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1, 
2017  (tlae  “May  2017  Pinancial  Statement”),  that  was  also  attached.  The  May  2017  Einancial 
Statement  hicluded  a  cover  letter  from  Cohen’s  accountant,  Jeffi-ey  Getzel,  stating,  m  sum  and 
substance,  that  tire  information  in  the  statement  came  finm  Cohen  and  that  Getzel  had  not 
confirmed  its  aocumcy  or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  Irad 
total  assets  of  $41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The 
May  2017  Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in 
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cash,  $26,155,000  hi  closely  held  companies  (such  as  the  taxi  medallion,  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  hwestnients,  and  his  $11,000,000  personal  residence. 

j.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 


Employee-1 , 1  have  leained’&at  Sterling  Employee- 1  reviewed  each  hne  of  the  May  20 1 7  Pinancial 
Statement  with  Cohen  to,  among  o&er  thhjgs,  verify  its  accmncy,  and  Sterling  Employee- 1  aslced 
Cohen  about  the  cash  amount  listed  on  the  May  2017  Financial  Statement.  Cohen  stated  to  Sterling 

Employee^l;  in  sum  and  substance,  that  the  May  2017  Phiancial  Statement  was  accurate. - 

k.  On  or  about  August  16,  2017,  Sterling  Employee-1  emailed  Cohen  at  the  Cohen 


Account  andl 


I  at  thel 


lAccount,  attaching  a  non-binding  term 


sheet  memorializing  the  potential  transaction  between  Sterling,  Meh-ose,  Cohen,  and 


On  or  about  August  29,  2017, 


|anailed  Sterling  Employee- 1  from  the| 

and/or 


Account,  requesting  that  he  be  included  on  “all  future  e-mails 

concerning  this  matter,*’  and  providing  proposed,  edits  to  the  term  sheet.  On  or  about 
August  30,  2017,  Steiiing  Employee- 1  emailed  ||||m^||^^at  the 
Account,  Cohen  at  the  Cohen  Account,  ani^Hattlie^^^ccount,  and  provided  them  witli  a 


revised  tenn  sheet.  On  or  about  September  5, 2017,  Sterling  Employee-1  sent  .| 


at  the 


Account,  Cohen  at  the  Cohen  Account,  an 
copy  of  the  executed  term  sheet.  According  to  the  term  sheet, 

$20,000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medalUons  tha 
acquire  from  Cohen, 


tt  th<l 


kccount  a 
would  borrow 
was  to 


1.  As  part  of  the  agreement,  according  to  the  term  sheet,  $1 ,265,9 1 3  hr  principal  (which 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by- Cohen  and  the  two  banlts,  with  Cohen  paying  fifty  percent  and  the  banks  dividing  the 
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remaining  half  of  the  balance.  Based  on  my  review  of  an  mtemal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  prelindnary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Mekose  would  absorb 
$357,167  and  $275,789  respectively  in  the  form  of  clrarge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance— despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars— because 
“  Coheu  represented  on  a  telephone  call  with  Sterling  Employee-! ,  in  sum  and  substance,  that  he  had 
in.sufficient  liquidity  to  pay  the  Ml  outstanding  principal  balance.  As  part  of  the  agreement.  Sterling 
and  Melrose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  M^^^^Hransaction,  Cohen  would  no  longer 
have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

m.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  tire  transaction  between  the  parties  was  subject  to  Ml  credit  underwriting  by  Sterling  aud 
Melrose  (as  well  as  Melrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
required  and  requested  additional  financial  statements  for  Cohen  arrd  for  its  credit 

underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  October  5,  2017, 

Account  to  a  Sterling  employee  a  copy  of^H 
^^^^^^^frersonal  financial  statement.  The  financial  statement  lists  the 
Account  as  the  email  contact  Additionally,  on  or  about  October  5,  2017, 

Cohen,  usmg  the  Cohen  Account,  re-sent  Sterling  EmpIoyee-2  a  copy  of  his  May  2017  Financial 
Statement.  A  day  later,  on  October  6,  2017,  Coheu,  using  the  Cohen  Accorurt,  emailed  Sterling 
Employee-2  a  statement  of  financial  condition,  dated  September  30,  2017  (the  "September  2017 
Financial  Statement”), 
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n.  Like  the  May  2017  Financial  StateraenL  the  September  2017  Financial  Statement 
included  a  coYer  letter  from  Jeffi-ey  Geteel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September'  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.  Notably, 
nnlikR  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.-  -The  September  201-7-Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate  holdings), 
$3,200,000  in  real  estate  investments,  and  his  $11,000,000  pei'sonal  residence  (which,  for  the  first 
time,  he  hidicated  was  held  in  trust).  'iTie  September  2017  Financial  Statement  included  assets  and 
liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions  and 
some'  of  his  real  estate  investment  entities. 

o .  From  my  paificipation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  at  or  around  the  time  Cohen  piovided 
Sterling  with  ttiese  financial  statements— in  or  aronnd  September  2017— Cohen  stopped  paying 
monthly  loan  payments  on  his  taxi  medallion  loans  altogether.  According  to  Sterling  Employee- 
2,  Cohen  informed  Sterling,  in  sum  and  sub, stance,  that  he  had  iusufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans,  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
"payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  tlie 


^Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thirty-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  whic^j^^^siderably  less  than  the 


$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-| 


Iteim-sheet. 
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September  2017  Financial  Statement,  and  bis  delinquency  in  maldng  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  under-writing  committee  determined  (and  memorialized  in  a 
December  20 17  memorandum)  that  the  Cohen-^^^^|transactimi  was  favorable  for  the  banlc 
-  that  is,  that^^^^|would  be  a  better  borrower  than  Cohen. 

p.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments,  On  December  29, 2017,  Sterling  sent  Cohen  a 
letter  stating  tliarhe  was  in  default  under  the' loans  between  Sterling  and  Cohen’s  medallion 
corporations,  Cohen  did  not  make  an  immediate  payment  on  the  loans,  but  instead  sent  an  e-mail 
to  Sterling  Employee-1  on  or  about  Jannaiy  24, 20 1 S,  from  the  Cohen  Account,  stating  that  during 
the  closing  of  the  Cohen-^^^Hi  transaction,'  Cohen  would  "bring  all  payments  up  to  date  as 
well  as  deposit  the  payoff  diJEferential.”  Cohen  also  requested  hy  email  sent  from  the  Cohen 
Account  on  January  24,  2018,  that  at  the  closing  of  the  Cohen^^^^^^^^|tL'ansaction,  Sterling 
provide  a  letter  stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal 
guai'antees  of  the  medallion  loans  bad  been  terminated, 

q.  The  Cohra^^^^^^lransaction,  however,  did  not  close.  On  or  about  January 
29, 20l8,|^^|  the  ^^^^^^|attortiey,  emailed  attorneys  for  Sterling  from  the^^^|t.ccotmt 
and  stated  that  “at  this  time  there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have 
changed  and  we  are  not  prepared  to  go  foiward,” 

r.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  vSterling,  I  Icnow  that  after-  the  Coher^^^^^^deal  fell  apart, 
Sterling  assigired  Cohen’s  loans  to  an  employee  at  Sterling  who  specializes  in  collecting  on 
defaulting  loans  ("Sterling  Employee-3”).  From  my  review  of  telephone  call  notes,  I  know  that 
Sterling  Employee-3  spoke  to  Cohen  on  or  about  January  30,  2018  about  paying  dowir  and/or 
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restmctm-ing  Cohen’s  outstanding  taxi  medallion  loans.  Based  on  my  review  of  an  email  between 
Sterling  Employee-3  and  Cohen,  I  know  that  on  tire  January  30,  2018  call,  Cohen  stated  that  he 
would  send  a  “corrected  cuiTcnf  ’  version  of  his  personal  iinaneial  statement,  Following  that  call, 
on  or  about  Januaiy  31,  2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen  Account  a 
copy  of  the  September  2017  Financial  Statement.  Later  that  day,  Coh  en  again  emailed  Sterlmg 
Emplayee-3  fr'om  the  Cohen  Account  and  proposed  paying  $500,000  to  bring  the  loans  current 
and  $750,000  to  bring  the  principal  balance  to  $20,500,000,-  Cohen  also  suggested  revised  monthly 
interest  payment  amounts.  On  or  about  January  31,  2018,  Sterling  Employee-3  responded  to 
Cohen  at  the  Cohen  Account  and  stated,  in  sum  and  substance,  that  Cohen  would  need  to  pay  the 
entii'ety  of  the  overdue  payments  and  pay  down  the  principal  balance  of  the  loan  to  $20,000,000 
(in  total,  a  payment  of  approxhnately  $1,750,000),  arid  would  need  to  make  larger  monthly  interest 
payments. 

s.  On  01'  about  Februai-y  1 , 201 8,  Cohen  emailed  Sterling  Employee-3  fr'om  the  Cohen 
Account  and  proposed  “[pjayment  of  $1.250m  which  ALL  can  be  used  to  pay  do'wn  principal,  if 
[Sterling]  will  waive  past  due  amounts,”  but  stated  “1  do  NOT  have  more  than  the  $L250m.” 
(Emphasis  in  original.)  Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial 
resources  to  post  additional  collateral  or  pre-fund  montlily  payments.  Based  on  my  participation 
in  an  interview  with  Sterling  Employee-2, 1  have  learned  that  Sterling  continues  to  renegotiate  the 
medallion  loans  with  Cohen  based  on  Cohen’s  representations  about  his  emrent  financial  position. 
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C.  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  fi'om  Sterling  and  Melrose  Cash  Derived  fi'om  Consulting  Work 

15.  As  set  forth  in  detail  below,  despite  multiple  representations  by  Cohen  to  Sterling  (and, 
by  extension,  Melrose®)  that  he  had  insufficient  firnds  to  pay  down  the  principal  balance  of  the 
medallion  loans,  make  monthly  interest  payments,  or  pay  past-due  amounts,  it  appeal's  that 
betweeii20l6  and  the  present,  Cohen  opened  and  maintained  bank  accoimts  at  Fhst  Republic  Bank 
(^First  Republic-),  and  then  received  millions  of  dollars  in  purported  consulting  payments  in  these 
accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these  accounts  and  received  these 
funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling  about  his  personal  finances 
(mcludhig  his  assets  and  liabilities)  and  his  ability  to  make  payments  on  the  medalhon  loans,  In 
these  disclosures  to  Sterling — and  despite  being  asked  about  these  baulc  accounts  by  his 
accountant, — Cohen  withheld  information  about  liquid  financial  assets  at  Fii’st  Republic. 

16.  Specifically,  based  on  my  review  of  documents  and  banlcrecords  produced  pm-suant  to 
a  subpoena  by  FhstRppubhc,  and  my  participation  in  and  review  of  reports  of  interviews  with  two 
First  Republic  employees,  I  have  learned,  among  other  things,  the  foUo'wing: 

a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  conhols  several  checking  aird  loan  accounts,  some  in  his  own  name  and  othei's 
in  the  names  of  corporate  entities. 


®  Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Mehose,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Mehos^^^t 
Mehose  could  make  a  deteiTuination  as  to  whether  to  approve  of  the  Coher^^^^^^^^ 
ti'ansaction.  Based  on  my  review  of  reports  of  interviews  with  Mehose  employees,  I  also  know 
that  Cohen  called  employees  at  Mehose  regar'ding  the  Coher|  ' 


I  transaction. 
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b.  On  or  about  October  26,  2016,  iii  Manhattan,  New  York,  Cohen  opened  a  new 
checking,  .account  at  First  Republic  in  tire  name  of  Essential  Consultants  LLC  (the  “Essential 
Consnltente  'AecQUtiiF’).  Cohen  was  the  only  autliorized  signatory  on  the  account.  When  Cohen 
opened  the  Essential  Consultants  Account,  a  Fhst  Republic  employee  (“Fhst  Republic  Employee- 
1”)  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your-customer 
questions’  about  the  purpose  of  the  account— the  answers  to  which  First  Republic  Employee-1 
“entered  into  a  form® — Cohen'stated,  in  sum  and  substance,  that  he  was  opening -Essential 
Consultants  as  a  real  estate  consulting  company  to  coUect  fees  for  investment  consulting  work, 
and  aU  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Cohen 
also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the  revenue 
fi'om  his  consulting  business— which  he  said  was  not  his  main  source  of  income  separate  fiom 
his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  mtended  plnpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  the  account  was  not  intended  to  receive— and  does  not  appear  to  have 
received— money  in  connection  with  real  estate  consulting  work;  in  addition,  the  account  has 

received  substantia],  payments  fiL'om  foreign  sources. 

c.  Fhst,  on  or  about  October  27,  2016— the  day  after  lie  opened  the  Essential 
Consultants  Account,  Cohen  used  the  account  to  wire  $130,000  to  an  account  held  in  the  name  of 
attorney  Keith  Davidson’ s  law  firm.  Based  on  my  review  of  emails  between  Cohen  and  Davidson, 


’  Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Banlc 
Secrecy  Act  and  its  impleraentingregulations.  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

®  Fhst  Republic  EmplDyee-1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December- 19,  2016,  at  the  request  of  bank  comphance  personnel,  Fhst 
Republic  Employee- 1  updated  the  for-m  to  add  more  detail  about  Cohen’s  statements. 
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obtained  pursuant  to  the  Prior  Cohen  Account  Warrants,  I  believe  that  this  payment  did  not  relate 
to  any  real  estate  consulting  work,  but  ratiicr  was  a  “settlemenP’  payment  nmde  to  Davidson’s 
client.  ®  Based  on  my  review  of  public  sources,  I  have  learned  that  Davidson’s  client  is  alleged  to 
have  had  an  extramarital  affair-  with  Donald  Trump.  On  or  about  F ebmary  1 3, 20 1 8,  Cohen  made 
a  public  statement  that  “[i]n  a  private  hansaction  in  2016,  I  used  my  own  personal  funds  to 
facilitate  a  payment  of  $130,000  to  [Davidson’s  client].” 

d.  Second,"!  Imow  fiom  my  review  of  First  Republic  hanlc  records  that  were  scheduled 
by  an  FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  drat  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  sei-vices.  Specifically, 
from  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  1  Icnow  fire 
following: 

I.  Beguming  on  or  about  Januar-y  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  from  an  entity  called  Columbus  Nova  LLC,  which  were  deposited  into  the 
Essential  Consultants  Account.  According  to  public  sources,  Columbus  Nova  is  an  investment 
management  firm  controlled  by  Renova  Group,  an  industrial  holding  company  based  in  Zurich, 
Switzerland  that  is  controlled  by  Russian  national  Vilctor  Vekselfaerg.  From  January  2017  to 
August  2017,  the  Essential  Consultants  Account  received  seven  payments  totaling  $583,332.98 
from  Columbus  Nova  Ll,C. 


^  Specifically,  I  have  learned  from  my  review  of  banlc  records  that  on  or  about  October  26, 
2016,  Cohen  fransfeired  $131,000  fi-om  a  home  equity  Ime  of  credit  account  at  First  Republic  to 
die  Essential  Consultants  Account;  on  or  about  October  27,  2016,  Cohen  franslerred  $130,000 
from  the  Essential  Consultant  Account  to  an  account  held  in  the  name  of  Davidson’s  law  firm  at  a 
bank  based  in  Los  Angeles;  and  on  or  about  November  1, 2016,  a  wfre  transfer  in  the  amount  of 
approximately  $96,645  was  made  from  Davidson’s  account  to  a  banlc  account  in  the  name  of 
Davidson’s  client* 
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ii.  Beginning  on  or  about  April  5, 20 17,  Cohen  began  receiving  payments  from 
Novai'tis  Investments,  SAEJ.,  which  I  believe  to  be  the  in-house  financial  subsidiary  of  tire  Swiss 
pharmaceutical  company  Novartis  Intemational  AG  (“Novartis”),  Between  April  2017  and  January 
2018,  the  Essential  Consultants  Account  received  ten  wire  payments  from  a  Swiss  bank  account 
held  in  the  name  of  Novartis,  each  in  the  amonnt  of  $99,980,  for  a  total  of  $999,800. 

iii.  Beginniag  in  or  about  April  20 1 7,  the  Essential  Consultants  Account  started 
■  receiving’ wire  payments  from  a  bank  account  associatedwritii  the  telecommunications  company 

AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  wired  $100,000  to  the 
Essential  Consultants- Account  and,  from  in  or  about  June  2017  to  In  or  about  January  2018,  the 
Essential  Consultants  Account  received  nine  $50,000  payments  from  AT&T.  In  total,  AT&T  wired 
$550,000  to  the  Essential  Consultants  Account, 

iv.  On  or  about  May  1 0, 20 1 7,  June  9, 20 17,  July  1 0, 2017,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four'  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  banlt  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is  Korea  Aerospace  hidush'ies  Ltd,  (“KAI”).  KAI  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 
Department  of  Defense,  among  other  customers. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertsbanlc,  a  Kazakhstani  banlc.  The  listed  account 
holder  at  Kazkommertsbank  was  a  second  Kazakhstani  banlc  named  BTA  Bank,  AO.  A  message 
accompanying  tire  wire  payment  indicated  that  the  payment  was  a  “jnonthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 
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vi.  In  total,  &om  on  or  about  Januairy  3 1 , 20 1 7  to  on  or  about  Janiiaiy  1 0, 20 1 8, 
the  Essential  Consultants  Account  received  approximately  $2,883,132.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  10, 201 8,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23. 

G.  On'or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  Ehst 
Republic,  tliis  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  "MDC&A  Account”). 
Cohen  was  the  only  authoiTzed“sigffatory^n  the  account.  Arnong“other  things,  the  MDC&A 


Account  received  ten  wire  transfers  and  one  check  from  an  account  in  the  name  of  Squire  Patton 
Boggs,  a  law  firm.  In  total,  fi:om  on  or  about  April  5,  2017,  to  on  or  about  January  2,  2018,  the 
MDC&A  Accoimt  received  $426,097.70  in  deposits,  and  the  balance  hi  the  account  as  of  January 
2,  2018,  was  $344,541.35.  As  discussed  below,  Cohen  never  disclosed  any  of  the  balance  in  the 
Essential  Consultants  or  MDC&A  accomits  to  Sterling  dm'ing  the  negotiations  with  respect  to  the 
I  transaction,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

17.  Based  on  my  review  of  emails  from  the  Cohen  Accoimt  that  were  seized  pursuant  to 
the  Prior  Cohen  Account  Waitants,  and  my  review  of  reports  of  interviews  with  employees  of 
AT&T  and  Novartis,  it  appears  that  the  aforementioned  payments  to  the  Essential  Consultants 
Account  and  MDC&A  Account  ostensibly  were  for  political  consulting  work,  includnig  consulting 
for  international  clients  on  issues  pending  before  the  Trump  administration.'*'  Specifically,  fcom 
my  i-eview  of  emails  fi'om  the  Cohen  Account  and  public  sources,  I  have  learned  the  following; 


Based  on  my  review  of  public  somnes,  I  have  learned  that  Cohen  is  not  registered  as  a 
lobbyist  or  as  a  person  acting  as  an  agent  of  foreign  principals,  as  may  have  been  required  by  the 
Foreign  Agents  Registtatjon  Act. 
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a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  from  tire  Cohen  Account  to  an 
individual  whom  I  believe  is  affiliated  witli  ICAI.  fa  the  email,  Cohen  attached  a  document 
puiporting  to  be  a  “Consulting  Agreement”  between  KAI  and  Essential  Consultants  dated  as  of 
about  May  1, 2017.  The  document  indicates  that  Essential  Consultants  would  render  “consulting 
and  advisory  services,  as  requested”  by  KAI,  and  that  KAI  would  pay  Essential  Consultants  "a 
consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000.00)  US  Dollars,”  disbursed 
through  eight  $150,000  installments  between  May  2017  and  December  2017. 

b.  On  or  about  May  10,  2017,  Cohen  sent  an  email  fi'om  an  alternate  email  address, 
copying  the  Cohen  Account,  to  an  employee  of  BTA  Banlc,  To  the  email,  Cohen  attaclied  an 
invoice  to  BTA  Baalt  in  the  name  of  Essential  Consultants.  The  invoice  contemplated  a  $150,000 
payment  to  Essential  Consultants  for  a  “monthly  coDSuldng  fee.” 

c.  On  or  aboutFebraary  13, 2017,  Cohen  emailed  an  AT&T  employee  horn  the  Cohen 
Account  what  appears  to  be  a  consulting  agi'eement,  which  contemplates  that  Essential  Consultants 
“shall  render  consulting  and  advisory  sei-vicesto  [AT&T]”  and  that  AT&T  would  “advise  [Essential 
Consultants]  of  those  issues  and  matters  with  respect  to  which  AT&T  Semces  deshes  [Essential 
Consultants] ’s  assistance  and  advice.”  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  Iris 
services  ...  a  consulting  fee  of  Fifty  Thousand  ($50,000)  Dollars  .  , .  per  month.”  Based  on  my 
review  of  repoits  of  interviews  witli  AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen 
to  consult  on  political  issues,  including  net  neuhalify,  the  merger  between  AT&T  and  Time  Warner, 
and  tax  reform. 

d.  On  or  about  January  1 7,  2017,  Cohen  emailed  to  a  representative  of  Novartis  from 
the  Cohen  Account  a  confract  between  Novartis  and  Essential  Consultants,  which  provides  tliat 
Essential  Consultants  will  “provide  consulting  and  advisory  services  to  Novartis  on  matters  that 
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relate  to  the  I'epeal  and  replacement  of  the  Affordable  Care  Act  in  the  US  and  any  otlier  issues 
mutually  agreeable  to  pBssential  Consultants]  and  Novartis.”  The  contract  provides  for  a 
“consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to 
Essential  Consultants  in  even  monthly  installments  over  the  course  of  a  year.  Based  on  my  review 
of  reports  of  interviews  with  Novartis  employees,  I  have  learned  that  Novailis  retained  Cohen  to 
provide  political  consulting  services  and  to  gain  access  to  relevant  poUcymakers  in  the  Trump 
Administration.  ” 

e.  On  or  about  April  3,  2017,  Squire  Patton  Boggs,  a  law  firm,  amiounced  on  its 
website  that  is  had  formed  a  “strategic  alliance”  with  Michael  D,  Cohen  &  Associates  and  would 
"j  ointly  represent  clients.” 

IS.  Despite  the  significant  amoimt  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose,  Specifically,  based  oiimy  review  of  documents 
provided  by  Getzel,  and  my  review  of  notes  anc| 
have  learned  the  following; 

a  In  or  about  May  2017,  Geteel  met  with  Cohen  at  a  law  fmn  in  Manliattan,  New 

',1 

York.  At  the  meeting,  Cohen  told  Getzel;  ip  siuDe  and  substance,  that  he  had  set  up  a  law  practice 

, :  i '  r,-.  ■  I' 

called  Michael  D.  Cohen  &  Associates  P  jC'.,  consulting  company  called  Essential  Consultants 


LLC.  Cohen  told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in. 
conneetion  with  his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to 
be  between  five  and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  eailier,  Getzel  was  preparing  apei-sonal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  at  the  Cohen 
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Account  in  which  Getzel  wrote  that  “[ajttached  is  a  draft  of  the  new  PFS  as  of  September  3  0, 20 17 
and  attached  a  draft  of  the  September  2017  Financial  Statement  The  di-aft  statement  reflected  that 
as  of  September  30,  2017,  Cohen  had  only  $1,250,000  m  cash,  total  assets  of  approximately 
$33,430,000  (comprised  of  taxi  medallion  interests,  real  estate  interests,  and  his  persona]  residence 
and  property),  and  liabilities  of  approximately  $45,630,000,  leaving  him  purportedly  over  $12 
million  in  debt.  Jn  the  same  email,  Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact 

- thafthe  financial  statefflent-did  not  list  any  assets  associated  with  either  the  Essential  Consultants 

Account  or  the  MDC&A  Account;  “[wie  did  not  add  any  value  for  you[r]  two  operating  entities  - 
Michael  D.  Cohen  &  Associates  POC  [.s/c]  and  Essential  Consultants  LLC.  Please  advise  whether 

or  not  tliese  should  be  disclosed  and  what  value.” 

c.  On  or  about  October  6, 201 7,  Cohen  called  Getzel  by  telephone— which  is  reflected 
on  toll  records  for  Cohen’s  cellphone — -and  told  Getzel,  in  sum  and  sirbstance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value. 

d.  On  or  about  October  6, 2017,  following  tire  caU  with  Getzel,  Cohen,  using  the  Cohen 
Account,  responded  to  GetzeFs  email  with  the  answer  “Iljooks  good  to  me.”  Coheir  never  dhected 
Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 
Statement.  Neither  Essential  Consultants  nor  MDC&A  was  listed  on  the  September  2017  Financial 
Statement  that  was  provided  to  Sterling. 

19.  Based  on  the  foregoing,  and  finm  my  mview  of  baulc  records  aird  emails  sent  by  Cohen 
to  Sterling,  I  Icuow  that  the  September  2017  Fiimueial  Statement  made  no  mention  whatsoever  of 
assets  that  Cohen  held  in  the  Essential  Consultants  Account  or  the  MDC&A  Account.  As  of 
September  30,  2017— the  date  of  the  September  2017  Financial  Statement— Cohen  had 
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approximately  $673,729.95  m  the  Essential  Consultants  Account  and  $248,619,28  in  theMDC&A 
Account.  As  of  October  6, 2017,  tile  date  when  Getzel  aslced  Cohen  about  the  two  accounts,  Cohen 
had  approximately  $823,709.95  in  the  Essential  Consultants  Account  and  $248,619,28  in  the 
MDC&A  Account. 

Cohen  Understated  His  Available  Cash 

20.  In  addition  to  withholding  the  existence  of  the  Essential  Consultants  Account  and  the 
MDC&A  Account  firora  Sterling  and  Melrose,  it  appears  that  Cohen  also  substantially  understated 
his  available  cash  and  cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  fi'om  my 
review  of  the  September  2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen 
represented  that  he  had  $1,250,000  in  cash  as  of  September  30,  2017.  But,  from  my  review  of  a 
summary  of  banlc  records  that  were  scheduled  by  an  FBI  forensic  accountant,  I  have  learned  that 
Cohen  had  over  $5,000,000  in  cash  and  cash  equivalents  as  of  Septembei*  30,  2017.  Specifically, 
from  my  review  of  the  account  schedule  and  bank  records,  I  have  learned  the  following: 

a,  Cohen  has  throe  checldng  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  Septembel'  30, 2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank. 

b,  Cohen  has  three  accounts  at  Morgan  Stanley  in  Iris  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  throe  accoimts  was  $1,270,600.41. 

c,  As  of  September  30, 2017,  Cohen  had  $260,689.18  in  an  account  at  Signature  Bank. 

d,  In  addition  to  the  Esseirtial  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accomits  with  Lamn  Cohen  at  First  Republic,  ha  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  fom  accounts  at  First 
Republic. 
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e.  Coken  has  an  account  at  Betkpage  Credit  Union  with  $25,931,39  in  it  as  of 
September  30, 2017. 

f.  As  of  September  3  0, 20 1 7,  Cohen  had  $ 1 7,542 .54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  his  name  and  one  held  jointly  with  his 
wife— and  the  total  balance  across  the  two  accounts  as  of  September  30, 2017  was  $300,096.72. 

h.  hi  total,  as  of  September  3  0, 2017,  Cohen  had  at  least  $5,0 14,05 1 . 80  in  his  accounts 
- air  Capital  One  Bankr  Signature  Banlc,  TD  BanlcrBefhpage  Credit  Union, -First  Republic,  and  - 

Morgan  Stanley. 

21 .  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to  Steiling 
and  Melrose  ttiat  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen  withheld 
information  regai'ding  approximately  $5  million  in  funds  foom  Steiling  and  Melrose,  in  order  to 
secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-2,  and  my  review  of  repoits  of  inteiwiews  with  Sterling 
Employee-1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling  and  Mehose 
would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to  renegotiate 
Cohen’s  medallion  loans  and  on  what  terms,  or  approve  of  the  transfer  of  those  loans  to 


Cohen  Had  a  Side  Agreement  With 


22.  As  set  forth  in  detail  below,  it  appears  that  dui'ing  the  coui'se  of  Cohen’s  negotiations  to 
sell  his  interest  in  taxi  medallions  and  tlie  associated  debt  to  Cohen  not  only 

misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  deal  he  had 
negotiated  with  it  appears  that  agreed  to  pay  an  above-market  price  for 


Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agieed  to  pa 


pproximately 
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$3,8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  reports  prepared  by  law  enforcement  officers  of  interviews  with  Sterling 
Employee-1,  as  well  as  my  participation,  in  an  inteiview  with  Sterling  Enipioyee-2, 1  have  learned, 
among  other  things,  the  following; 

a.  On  or  about  September  5,  2017,  an  executed  term  sheet  was  cireulated  by  Sterling 
Employee-1  to  Cohen  and^^|^^|  See  supra  H  H(ic).  According  to  the  term  sheei^^^ 

^^^^^Htvould  borrow  $20,000,000  ftom  Sterling  and  Meh‘ose,'to  be  secured  by  the  medallions 
to  acqune  fi’om  Cohen.  At  aprice  of  $20  million  for  thirty-two  taxi  medallions, 
the  proposed  transaction  valued  each  medallion  as  worth  $625,000.  The  term  sheet  also 
contemplated  a  $  1,265,91 3  pay-down  of  the  principal  balance  of  the  loan.  The  term  sheet  made  no 
mention  of  a  $3.8  million  payment  from  Cohen  tojUUIH  or  any  other  fomi  of  payment  or 
financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Stei-ling  credit  memorandum,  dated  October  4,  2017, 

desert  bing  the  terms  of  the  Cohen-H^HHtraasacfLon  and  die  new  loaii  ijUmH^Hiid 
not  mention  any  payments  from  Cohen  including  a  $3.8  million  payment.  Hie 

memorandum  also  noted  that  the  “loan  amount  of  $20MiVt  indicates  a  $625M  purchase  price  per 
medallion”  but  “it  is  recognized  that  this  is  not  in  line  with  cmTent  market  values.”  Indeed, 
according  to  au  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
2018,  taxi  medallions  sold  for  amoimts  ranging  fi'om  $120,000  to  $372,000.  According  to  Sterling 
Employee- 1  and  Sterling  Employee-2,  they  were  never  told  agi’eed  to  apurahase 

price  of  $625,000  in  exchange  for  a  lump  sum  payment  fi'om  Cohen,  or  that  Cohen  would  make 
any  payment  to 
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23.  While  Cohen  and  not  disclose  any  payment  firom  Cohen  to 

^^mUjjjin  communications  witli  Sterling,  it  appears  diat  such  a  payment  was  contemplated. 

Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  ajid  a  report  prepai'ed  by  law 
enforcement  agents  of  an  interview  with  Getzel,  I  have  learned  the  following,  in  substance  and  in 
part,  regarding  the  proposed  side-payment  from  Cohen 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
—  -entitled,  "Sale  of ISTYC-Medailion  Entities  and  Debt  Assumption’  (the-"Getzei  Memorandum”).- 

The  Getzel  Memorandum  summarized  tire  proposed  transaction  between  Cohen 
in  part,  as  follows:  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  tliei]'  banlc  indebtedness,  upon  the  [Cohens’]  paying  down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800,000.”^^ 

b,  According  to  Getzel,  Cohen  told  him  the  paramelBrs  of  the  deal,  includhig  the 

payment  of  $3,800,000  Getzel  did  not  Imow  where  Cohen  was  going  to  obtain 

$3,800,000  to  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 

cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $1 .25  milHon  in  cash. 

24,  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  hank 
with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterlhig 
(and  Melrose),  I  have  seen  no  evidence  tliat  Sterling,  Melrose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and^^^^^vas  aware  of  the  planned  $3.8  million 
side  payment  from  Cohen 


The  reference  to  thirteen  medallions  appears  to  be  an  eixor  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  m  ton  owned  32  taxi  medallions. 
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D.  Probable  Cause  Regarding  the  Subject  Accounts 

25 .  As  set  forth  above,  since  at  least  September  20 15,  if  not  earlier,  Cohen  has  told  Sterling 
ibflt  he  has  difficulty  making  payments  on  his  medallion  loans  and,  since  at  least  October  2016, 
Cohen  has  been  actively  engaged  in  an  attempt  to  sell  his  taxi  medallions  and  the  associated  debts 
In  the  com’se  of  doing  so,  Cohen  has  used  the  Cohen  Account  and/ or  MDCPC 
Account  to  engage  in  emaU  communications  regarding  the  terms  of  the  transactions  and  the 
undisclosed- side-payment  at  the Account, 

^^^^^^atthe^^^^^^^^Account,  at  thc^^^tccount. 

as  described  above,  thei'e  is  probable  qansc  to  believe  that  the  Subject  Accounts  have  been  used 
regarding  the  proposed  Cohei]^^^^^|transaction  with  Sterling; 

a.  Cohen  has  used  the  Cohen  Account  to,  among  other  things,  negotiate  a  pay-down 
of  the  prmcipal  amount  of  the  loan,  see  supra  ^  14(g),  to  send  tcnn  sheets  to  Sterling,  see  supra  If 
14(j),  to  communicate  with  his  accountant  about  the  contents  of  financial  statements,  see  supra  1[ 
16,  to  send  financial  statements  to  Sterling,  see  supra  Tf  14(1),  (1),  to  check  on  the  status  of  the 
h-ansaction  as  of  January  24,  2018,  see  supra  14(n),  to  negotiate  a  reduction  of  his  debt  with 
.  Sterling  on  or  around  January  31, 2018,  see  supra  If  14(o),  to  tell  Sterling  on  February  1, 2018,  he 
does  not  have  the  ability  to  pay  more  than  $1,250,000,  jeejMpra  If  14(p),  and  to  corummiicate  with 
individuals  responsible  for  somues  of  payments  to  the  Essential  Consultants  Account,  see  sup'a  jf 
15.  In  oflier  words,  from  Ihe  cormnunlcations  described  above,  it  appears  lilcely  that  the  Cohen 
Accomit  will  contain  recent  evidence  of  the  Subject  Offenses,  including  communications  and 
potential  misiepresentations  to  Sterling,  and  evidence  indicating  that  statements  made  to  Sterling 
are  false  or  misleading. 

g,  used  the  ^^^^^^^^^^Account  to  communicate 

the  proposed  taxi  medallion  transaction  with  Cohen,  which  appeal's  to  have  been  discussed  as  early 
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as  October  2016.  See  supra  T[  14(g). Specifically,  as  described  above,  as  early  as  May  2,  2017, 
|||||||||||||[||||^  to  inquii'o  about  the  status  of  the  transaction^ 

see  supra  H  14(h).  He  used  exchange  drafts  of  the  proposed  temi 

sheet  with  Cohen.^',  and  Sterling,  see  supra  1  UQ).  The^^^^^|ccormt  was  also 
used  send  a  personal  financial  statement  Sterling, 

see  supra  f  14(1).  The^^^^^^^^Account  was  copied  on  emails  ftom 

“Account  about  the  traiis'action,  see  supra~\  \'^^,  and  was 'listed' on  JB^m  financial- 
statement  as  the  contact  emaU  supra  Tf  1 4(m).  Additionally,  based  on  my 

review  of  MDCPC  Header  Information,  I  Icnow  tliat  on  or  about  September  1,  2017—at  or  around 
the  tune  tht^^^^^^^and  Cohen  were  negotiating  a  term  sheet-^^^^^^^^fased  the 
Account  to  send  and  receive  eigiit  emails  from  Cohen  at  the  MDCPC  Account. 

0,  ^Bbas  used  tb^^J^ccount  to  communicate  with  Sterling  employees,  Cohen, 
proposed  taxi  medallion  transaction  since  at  least  Decembei-  2016. 
See  supra  UTI  14(g),  24(c).  Specifically,  on  or  about  August  29,  2017,^B^^‘^  Sterling  that  he 
should  be  included  on  “all  future  e-mails”  involving  the  proposed  haiisaction,  see  supra  H  14(j). 
Additionally, ^^Jwas  involved  in  malting  revisions  to  the  parties’  term  sheets,  and  he  told 
Sterling  on  January  29,  2018  that^^^^^  would  not  go  forward  witli  the  planned  transaction, 
see  supra  H  14Q),  (n).  Accordingly,  there  is  probable  cause  to  believe  tlmtthe^J\ccount  will 
contain  evidence  of  the  negotiations  between  Sterling  and  the  parties,  evidence  of  a  payment  from 


Cohen  tol 


and  the  reasons  for  the  collapse  of  the  Cohe: 


transaction. 


For  instance,  from  records  provided  by  Sterling,  I  know  that  on 
2016^^^^t|^^^^^|ont  an  email  to  a  Sterling  employe^siug  the 
Account,  The  email  forwai’ded  correspondence  betweer^^^Br^^v^yim^^e 
Account,  and  an  employee  of  Capital  One  regai'ding  extending^^^^^^B^”^ 
Capital  One. 
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26.  Additionally,  it  appeai-s  that  Cohen  set  up  the  MDCPC  Account  to  receive  emails  he 
was  previously  receiving  at  the  Cohen  Account.  Specifically,  based  on  my  review  of  records 
mamtained  by  AT&T,  I  have  learned  that  on  or  about  May  5, 2017,  Cohen  sent  an  email  fiom  tire 
MDCPC  Account  to  a  blind  copy  list  of  recipients  stating  that  “[d]ue  to  the  overwhelming  volume 
of  phone  calls  and  emails  coming  into  my  previous  cellular  number  and  e-mail  address,  I  have 
elected  to  create  for  Clients  Only  the  followuig.  Kindly  use  this  new  infoimation  for  all  future 
cohtacfmd  conrmunicatibns.’’  "The  signature  line  on  the  email  listed  “Essential  Consultants  LLC” 
and  ‘TVfichael  D.  Cohen  &  Associates,  PC,”  as  well  as  the  MDCPC  Account  as  the  email  address. 

27.  hi  addition,  based  on  my  review  of  emails  from  the  MDCPC  Account  produced 
pursuant  to  the  Prior  Cohen  Account  Warrants  and  the  MDCPC  Header  Infor-mation,  I  have  learned 
that  Cohen  has  used  the  MDCPC  Account  to  send  and  receive  emails  from  tire  Cohen  Account,  to 
communicate  with  ihc^^|\ccoimt,  and  to  send  and  receive  emails  from  other  email  accounts 
about  his  political  consulting  business.  Additionally,  fi'om  my  review  of  the  MDCPC  Header 
Information,  it  appears  tliat  siirce  the  November  13, 2017  search  warxant  on  the  MDCPC  Account, 
Cohen  has  continued  to  send  and  receive  emails  at  the  MDCPC  Account  that  appear  likely  to  be 
relevant  to  the  commission  of  the  Subj  ect  Offenses.  For  example,  emails  obtained  pursuant  to  the 
Prior  Cohen  Account  Warrants,  as  well  as  the  MDCPC  Header*  hifoiraation  have  revealed  the 
following; 

a.  On  approximately  eight  occasions  in  August  and  September  2017,  while  Cohen, 
communicating  about  a  term  sheet  for  the  Cohei^^^^^^^Htaxi 


Based  ou  my  review  of  emails  fi'om  the  MDCPC  Account  obtained  pursuant  to  subpoena,  I 
have  learned  that  Cohen  has  used  tlie  account  to  communicate  with  numerous  individuals  with 
whom  he  does  not  enjoy  an  attorney-client  privilege,  including  some  of  the  individuals  described 
below.  See  inp'a  27, 
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tnedalUoii  teansaotion,  see  supra  ^  14(Ic),  Cohen  used  the  MDCPC  Account  to  send  or  receive 


emails  fi.'0]| 

ftl 


lat  thel 


lased 


BAccount.  For  instance,  on  or  about  August  22,  2017:J 
kccourit  to  send  an  email  to  Sterling  Employee-l  and  copied  Cohen  on  the  email  at  the 
MDCPC  Account.  On  the  same  day.  Sterling  Employee-1  i-esponded  to^^fat  tht^^|A.ccount 
and  Cohen  at  the  MDCPC  Account.  On  or  about  August  22, 2017,  Cohen  also  used  the  MDCPC 

Account  to  send  an  email  to  Sterling  Employee-1. 

b.  “As  noted  above,  on  or  about  September  1, 2017,  Cohen  used  the  MDCPC  Account 


to  send  or  receive  eight  emaib  with  the 


Account. 


'  c.  Cohen  used  tlie  MDCPC  Account  to  send  and  receive  emails  fi-om  individuals  who 
work  at  companies  with  whom  it  appeal's  Cohen  has  a  political  consulting  agi'eement.  For 
example,  beghming  in  April  2017— the  same  month  when  Cohen  began  receiving  payments  hrom 
AmX,  see  supra  TlH  16(d),  17(c)— Cohen  used  die  MDCPC  Account  to  send  and  receive  emails 
firom  AT&T  employees.  These  emails  contain,  among  other  things,  invoices  fi-om  Cohen  to  AT&T 


for  consulting  work  by  Cohen.  Similarly,  beginning  in  April  2017— which  is  also  the  month 
Cohen  began  receiving  payments  fiom  Novartis  for  consulting  work,  see  supra  1 6(d),  17(d)— 
Cohen  used  tlie  MDCPC  Account  to  send  and  receive  emails  fi-om  employees  of  Novai-tis.  These 
emails  concei-n,  among  other  things,  invoices  fi-ora  Cohen  and  requests  for  Novai-tis  for  Cohen’s 


assistance  on  an  initiative  i-elating  to  diug  pricing. 

d.  From  my  review  of  the  MD  CPC  Header  Information,  I  have  learned  that  Cohenhas 
continued  to  use  -the  MDCPC  Account  to  .send  and  receive  emails  fiom  individuals  who  work  at 
companies  with  whom  it  appeai-s  Cohen  had  a  political  consulting  agreement,  such  as  Novartis  and 
AT&T.  For  instance,  on  approximately  six  occasions  between  November  28,  2017  and  January 
30,  2018,  the  MDCPC  Account  was  used  to  send  and  receive  emails  fiom  accounts  belonging  to 
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individuals  using  @att.com  email  addresses,  Simikily,  on  approximately  seventeen  occasions 
between  December  1,  2017  and  Februai-y  20,  2018,  MDCPC  Account  was  used  to  send  and 


receive  emails  fiom  accounts  belonging  to  individuals  using  @novartis.com  email  addi'esses. 


Since  November  1 5, 201 7,  the  MD  CP  C  Account  has  also  sent  and  received  emails  with  individuals 
using  the  email  domains  @bta.Icz,  which  I  believe  is  die  email  domain  used  by  employees  of  BTA 
Bant,  see  supra  ^  16(d),  17(b),  and  @squu'epb.com,  which  I  believe  is  the  email  domain  used  by 
employees  of  the  lawr  fum  Squire  Patton  Boggs— both  of  which  Cohen  appears  to  have  a 
consulting  relationship  with,  see  supra  16(e),  17(e),  Accordingly,  it  appears  that  Cohen 
continues  to  use  the  MDCPC  Account  to  send  and  receive  emails  that  will  be  relevant  to  whether 
he  is  maintaining  a  consulting  business,  what  type  of  consulting  work  he  is  doing,  and  whetlier  he 
is  receiving  money  for  that  consulting  work. 

28 .  In  addition  to  the  foregoing,  based  on  my  review  of  the  Pen  Register  Data,  see  supra  1[ 
9,  it  appeai-s  that  since  the  date  of  the  last  search  wairant  on  the  Cohen  Account  (I'.e.,  November 
13,  2017),  Cohen  has  continued  to  use  the  Cohen  Account  to  communicate  with  the  , 


kccountj  and  other  email  accounts  that  appear  likely  to  be  relevant 


bcoimt,  the 


to  the  commission  of  the  Subject  Offenses  described  above.  For  example,  the  Pen  Registei  Data 
has  revealed  the  following; 


Lccount  on  or  about  December  18, 


a.  Emails  sent  by  the  Cohen  Account  to  thf| 


2017  at  8:26  p,m.,  December  21,  2017  at  9:35  p.m.,  December  22,  2017  at  4:32  p.m,,  January  3, 

2018  at  8:01  a.m.,  Januaiy  3,  2018  at  2:56  p.m.,  and  January  4, 2018  at  3:31  p.m. 


b.  An  email  sent  by  the  Cohen  Account  to  the 


econnt  on  or  about 


Januaiy  25,  2018  at  8:55  p.m. 
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c.  Emails  from  the  Cohen  Account  to  the  email  or 

about  Decembei- 1,  2017  at 2:14  p.m.,  December  29, 2017  at  10:20  p.m.,  January  2,  2018  at  3:52 


p.m.,  January  2,  2018  at  5:44  p.m.,  and  January  8,  2018  at  6:38  p.m.  Based  upon  my  review  of 
emails  contained  in  the  Cohen  Account,  I  have  learned  thatthe^^^^^^^^^^  email  account 
belongs  to  Jefhey  Getzel,  Cohen’s  accountant,  thimigh  whom  Cohen  made  misrepresentations  to 
financial  institutions,  as  discussed  above. 

“  dr  Bniails  fi:om  the  Cohen  Account  to  email  accounts  belonging  to  Sterling  employeesy 
uicluding  Sterling  Employee-l,  on  or  about  January  25,  2018  at  10:23  p.m.,  Januaiy  26,  2018  at 
12:55  a,m.,  January  29, 2018  at 5:30  p.m.,  January  29, 2018  at  8:29  p,m.,  January  30, 2018  at  6:44 


p.m. 

e.  An  email  sent  fi'om  the  Cohen  Account  to  the  email  account 
clientsei-viceny@firstrepublic.com  on  or  about  January  25,  2018  at  5:29  p.m.  As  stated  above, 
First  Republic  is  the  bade  at  which  the  Essential  Consultants  Account  is  held. 

f.  hlumerous  emails  sent  fiom  the  Cohen  Account  to  the  email  account 


,  including  emails  on  or  about  December  4, 2017.  at  2: 17  pm.  and  January  29, 
20 1 8  at  5 :43  p.m.  Based  upon  the  email  address  and  domain  name,  as  well  as  my  review  of  reports 
of  interviews  and  documents  reflecting  that  Cohen’s  taxi  medallions  were  leased  and  operated  by 

I  believe  that  the  email  address  belongs  to 


29.  Based  on  my  review  of  records  manitained  by  Sterling,  I  know  that  Cohen  used  the 
Cohen  Account  to  send  and  receive  documents  related  to  the  Cohen-^^^^Jtransaction. 
Based  on  my  hauiing  and  experience,  I  Imow  that  Google  allows  users  of  e-mail  accounts  to  easily 
documents  to  file  sharing  and  retention  platforms  such  as  Google  Does  and  Google  Drive.  I 


save 
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also  laiow,  from  my  training  and  experience,  that  users  of  e-mail  accounts  often  use  instant 
messaging  interfaces  linked  to  theft  email  accounts.  Further,  I  have  learned  that  the  Providers 
maintain  records  of  search  and  web  histories  associated  with  email  accounts  and,  based  on  my 
training  and  e}!perience,  users  of  e-mail  accormts  use  associated  web  search  browsers  associated 
with  a  subscriber’s  account  to  research  topics  they  are  e-mailing  about.  Accordingly,  there  is 
probable  cause  to  believe  that  content  information  associated  with  the  Subject  Accounts  will  also 


contain  evidence  related  to  the'  Subject  Offenses. 


30.  Thus,  Irespect&Uy  submit  that  there  is  probable  cause  to  believe  that  emails  and  other 
content  information  from  the  Subject  Accounts  will  contain  evidence  of  Cohen’s  efforts  to  seU  his 
taxi  medallions  and  the  associated  debt,  and  his  misrepresentations  and  omissions  to  Sterling  and 
Melrose  in  connection  with  these  negotiations.  Although  Cohen  appears  to  have  communicated 

iDiimarily  through  the  Cohen  Account  and 
MDCPC  Account,  I  Imow,  based  on  my  involvement  in  the  investigation,  that  Cohen  also  used  at 
least  one  other  email  account  associated  with  his  position  at  the  Trump  Organization.  Thus,  I 
respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other  content  information 


from  the  I 


lA.ocount,  J 


Account  and 


l4,ccoimt  shice  on  or 


about  October  1,  2016 — the  approximate  date  of  when  Cohen’s  efforts  to  sell  his  taxi  medallions 
and  the  associated  debt  began — will  reflect  communications  with  the  Cohen  Account,  MDCPC 
Account,  and  possibly  one  or  more  additional  accounts  used  by  Cohen,  and  probable  cause  to 
believe  that  such  emails  will  constitute  evidence  of  Cohen’s  commission  of  the  Subject  Offenses, 
including  the  extent  to  which  Cohen  did  or  did  not  inform  other  mdivi duals  involved  in  the  conduct 


described  above — -such  al 
omissions  to  financial  institutions. 


I— of  his  misstatements  and 


0Z2K.2013 


38 


Case  l:18-cr-00602-WHP  Document  48-5  Filed  07/18/19  Page  45  of  73 


3 1 ,  Tempoi'al  T-iTnitatinn.  This  application  seeks  all  emails  and  other  requested  eontent 
information  specified  in  Attachments'A,  B,  C,  and  D  for  die  following  periods: 

a.  For  the  Cohen  Account,  this  application  seelcs  all  emails  sent,  created,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive,  As  described  above, 
pursuant  to  the  Prior  Cohen  Account  Waixants,  the  SCO  obtained  and  provided  to  die  US  AO 
emails  fi-om  the  Cohen  Account  that  were  sent,  created,  or  mceived  before  November  14,  2017. 
This  applicafionTalso  seeks  other  uifoimation  specified  above'  associated  with  the  Cohen  Account 
that  was  created  between  December  1,  2014  (the  month  when  Cohen  entered  into  the  medallion 
loans  with  Sterling),  and  the  date  of  the  proposed  warrant,  inclusive. 

b.  For  the  MDCPC  Account,  this  application  seeks  all  emails  sent,  created,  or  received 
between  November  14, 20 1 7,  and  the  date  of  the  pinposed  warrant,  inclusive.  As  described  above, 
pursuant  to  a  prior  warrant,  the  SCO  obtained  and  provided  to  the  USAO  emails  fiom  the  MDCPC 
Account  that  were  sent,  created,  or  received  before  November  14, 2017 . 

For  and  this  application 

seeks  emails  and  aU  other  content  iiifoimation  specified  above  sent,  created,  or  received  between 
Octobei'  1,  2016,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above,  October 
2016  is  the  month  in  which  Cohen  began  negotiating  the  taxi  medallion  sale 

d.  For  the  ^^^Vocount,  this  application  seeks  emails  and  all  other  content 
information  specified  above  sent,  created,  or  received  between  December  1,  2016,  and  the  date  of 
the  proposed  waixant,  inclusive.  As  described  above,  December  20 1 6  is  the  month  in  which^^^| 
began  representing  relation  to  the  taxi  medallion  transaction. 

E.  Evidence,  Fruits  and  Insti'umentalities 

32.  Based  upon  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 
infoimation  stored  on  Coogle's  servers  associated  with  the  Cohen  Account  will  contain  evidence, 
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fi'uits,  and  iustrmiiDntalities  of  violations  of  the  Subject  Offenses,  as  more  fully  described  in 
Section  n  of  Attachment  A  to  the  proposed  wan'ant  for  the  Cohen  Account  and  MDCPC  Account, 
including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the  Cohen  Account  or  MDCPC  Account. 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling,  Mehose, 

mid/or  taxi  medallions;  " 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 

agi-eement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medaUions, 
and  any  associated  debts  ot  liabilities,  to  others,  including  entities 

associated  with  him; 

I"  'd.  I  Cpmmiinications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  IXC  of  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature 
and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  & 
Associates; 

e.  Communications,  records,  documents,  and  other  files  necassary  to  establish  the 

identity  of  any  person(3)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Cohen  Account  and/or  MDCPC  Account  about  any  matters  relating  to 
Essential  Consultants,  LLC,  or  about  any  plan  or  proposal  or  agi-eement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  otliers,  including  to  entities  associated  witir  bun; 

f.  Communications  between  the  Cohen  Account  and/or  MDCPC  Account  and  .leffrey 
Getzel  relating  to  Cohen's  bank  accounts,  taxes,  debts,  and/or  finances; 
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g,  Coimnuiiicatioiis,  records,  docunieiits,  and  other  files  reflecting  false 
representations  to  a  financial  institution  witli  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  accomrt  at  a 
furancial  institution;  the  source  of  funds  flowing  info  an  account;  or  the  purpose  or  nature  of  any 
financial  tr-ansactions  involving  that  financial  institution; 

h,  Evidence  indicating  how  and  when  the  Cohen  Account  and  MDCPC  Account  was 
accessed  dr  u^d, “to  cfeter-mine  the'po'^'aphic  and  chronOlogTcal ’context  of  account  access,  use,- 
arrd  events  relating  to  the  crimes  under  investigation  and  to  the  account  owner-;  and 

i,  Evidence  indicating  the  Cohen  Account  and  MDCPC  Account  owner’s  intent  as  it 

relates  to  the  Subject  Offenses  under  investigation. 

33,  Based  upon  the  foregoing,  I  fur-flrer  submit  there  is  probable  cause  to  bebeve  that 

irrfonnation  stor-ed  on  Google’s  servers  associated  with  the 

.coount  will  contain  evidence,  fi'uits,  and  instr-umentaUties  of  violatiorrs  of  the  Subject 

Offenses,  ineluding  the  following: 

a.  Communications,  records,  dociinrents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  tlj 
Account; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 
or  agreement  for  Cohen  and/or  entities  associated  with  Irim  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  h^^^^^^^^|and/or  entities  associated 
with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  tlie  person(s)  -  who 


Account  and 


Account  and  I 
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r.nrn m n n  1  r.a^ed  with  and  Account  about  any 

matters  relating  to  any  plan  or  proposal  oi'  agreement  for  Cohen  and/or  entities  associated  with  liim 
to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to 
entities  associated  with  him; 

d.  Communications  between  th^^^^^^^^^^^^Account  and 
Account  and  others,  including  employees  or  representatives  of  Stei-ling,  Mehose,  or  other  financial 
'iris'titution(s),regardin^CoE^’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  mto  an  account;  or  the  purpose  or  natuie  of  any 
financial  transactions  involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Account  and^ 

Account  were  accessed  or  used,  to  determine  the  geographic  and  chronological  context 

of  account  access,  use,  and  events  relating  to  the  crimes  under  investigation  and  to  the  account 


owner-; 

g.  Evidence  indicating  Account  and 

owners’  intent  as  it  relates  to  the  Subject  Offenses  under'  investigation, 

34.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Oath’s  servers  associated  with  the|^^^|lccount  will  contain  evidence, 
jfruits,  and  insh-umentalities  of  violations  of  the  Subject  Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the^^^J.ccount; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 
or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  tii^^^^^^^^^^^and/or  entities  associated 
with  him ; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 

identity  of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  witlt  the  ^^BAccminfabout  any  matters  relating  fd  any  plan  or  proposal  dr 
agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest’intaxi  raedaUious, 
and  any  associated  debts  or  liabilities,  entities  associated  with  him; 

d.  Communications  between  t^^^^Vccount  and  others,  including  employees  or 
representatives  of  Sterling,  Melrose,  or  other  financial  iustitution(s),  regarding  Cohen’s  finances; 
and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  uito  an  account;  or  the  purpose  or  nature  of  any  financial  ttans actions 
involving  that  financial  institution. 

m.  Review  of  the  Information  Obtained  Pursuant  to  the  Warrant 

35.Pui'suant  to  18  U.S.C.  §  2703 (g),  the  presence  of  a  law  enforcement  officer  is  not 
required  for  service  of  a  search  waixant  issued  under  §  2703,  or  for  the  collection  or  production  of 
responsive  records.  Accordingly,  tlie  wairant  requested  herein  will  be  transmitted  to  the  Providers, 
which  shall  be  duected  to  produce  a  digital  copy  of  any  responsive  records  to  law  enforcement 
personnel  within  30  days  fi-om  the  date  of  service.  Law  enforcement  personnel  (including,  in 
addition  to  law  enforcement  officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  t!ie 
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status  of  the  investigation  and  related  proceedings,  attorneys  for  tlic  government,  attorney  support 
staff,  agency  personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts 
under  government  control)  will  retain  the  records  and  review  them  for  evidence,  finits,  and 
instruraentaLities  of  the  Subject  Offenses  as  specified  in  Section  HI  of  Attachments  A,  B  and  C  to 
the  proposed  warrant. 

36.  In  conducting  this  review,  law  enforcement  pei-sonnel  may  use  various  methods  to 
"locate  evidence,  fiuits,iahd  mslnimentalities  of  the  Slihject  Offenses,  iricluding  but  not  limited  to 
undertaking  a  cursory  inspection  of  all  emails  within  the  Subject  Account.  This  metliod  is 
analogous  to  cursorily  inspecting  all  the  files  in  a  file  cafainet  in  an  office  to  determine  which  paper 
evidence  is  subject  to  seizui-e,  Although  law  enforcement  personnel  may  use  other  methods  as 
weU,  paiticularly  including  keyword  searches,  I  know  that  keyword  searches  and  similar  methods 
me  typically  inadequate  tq  detect  all  information  subject  to  seizure.  As  an  initial  matter,  keyword 
searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated  with  emails, 
including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store  data  as 
searcliable  text.  Moreover,  even  as  to  text  data,  keyword  searches  cannot  be  relied  upon  to  capture 
all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of  the  unique 
words  or  phrases  that  investigative  subjects  will  use  in  their  communications,  and  consequently 
there  ai'c  often  many  communications  in  an  account  that  ai‘e  relevant  to  an  investigation  but  that 
do  not  contain  any  keywords  that  an  agent  is  lilcely  to  search  for. 

37.  Because  Cohen  anr^^^|ire  attorneys,  the  review  of  the  content  within  the  Subject 
Accounts  will  be  conducted  pursuant  to  established  screening  procedures  to  ensui-e  that  the  law 
enforcement  personnel  involved  in  die  investigation,  includuig  attorneys  for  the  Government, 
collect  evidence  in  a  maimer  reasonably  designed  to  protect  any  attorney-client  or  other  applicable 
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privilege.  When  appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate 
and  apart  from  the  investigative  team,  in  order  to  review  potentially  privileged  communications 
and  determine  which  communications  to  release  to  the  investigation  and  prosecution  team. 

rV.  Request  for  Non-Disclosure  and  Sealing  Order 

38.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not  publicly  known. 
As  a  result,  premature  public  disclosure  of  this  affidavit  or  the  requested  warrants  could  alert 
Cbheirthat  he  is  imder  hivestigation,  causing  him  to  destroy  evidence,  flee  from  prosecntiou,-  or 
otherwise  seriously  jeopai'dize  the  investigation,  hi  particular,  based  on  my  experience 
investigating  wliite  collar  cases,  including  cases  featui'ing  documents  such  as  agi'eements,  di'afts 
of  agreements,  notes  of  conversations,  and  other  documentary  evidence,  premature  disclosure  of 
an  investigation  may  cause  the  target  of  the  investigation  to  attempt  to  desfroy  or  conceal  such 
evidence.  In  addition,  as  also  set  forth  above.  Cohen  uses  computers  and  elecfronic 
communications  in  fmtherance  of  his  activity  and  thus  could  easily  delete,  encrypt,  or  otherwise 
conceal  such  digital  evidence  fi-om  law  enforcement  wei'e  he  to  learn  of  the  Goveimnenf  s 
investigation.  See  18  U.S.C.  §  2705(b)C3).  Cohen  also  appems  to  have  the  financial  means  that 
would  facilitate  his  flight  from  prosecution.  See  18  U.S.C.  §  2705(b)(2),  (5). 

39.  Accorduigly,  there  is  reason  to  believe  that,  were  the  Providers  to  notify  the  subscriber 
or  others  of  the  existence  of  the  warrant,  the  investigation  would  be  seriously  jeopai'dized. 
Pursuant  to  1 8  U.S.C,  §  2705(b),  I  therefore  respectfully  request  that  the  Court  dhect  the  Providers 
not  to  notify  any  person  of  fiie  existence  of  the  warrant  for  a  period  of  180  days  fi'om  issuance, 
subject  to  extension  upon  application  to  the  Court,  if  necessaiy. 

40.  For  sbnilar  re  a, sous,  I  respectfully  request  that  this  affidavit  and  all  papers  submitted 
herewith  be  maintained  undei'  seal  imtil  the  Court  orders  otherwise,  except  tliat  the  Government 
be  peimitted  without  ftu-ther  order  of  this  Court  to  provide  copies  of  tire  wan'ant  and  affidavit  as 
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need  be  to  personnel  assisting  it  in  the  investigation  and  prosecution  of  this  matter,  and  to  disclose 
those  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  ftiis  matter. 

V.  Conclusion 

41.  Based  on  the  foregoing,  I  respectfully  request  that  tire  Court  issue  tire  warrants  sought 
her’ein  pursuant  to  the  applicable  provisions  of  tire  Stored  Communications  Act,  18  U.S.C. 

— §-2703(b)(l)(A}  (for  contents)  and  §  2703 (c)(l-)(A)- (for  records  and  other  information),  and  tire 
relevant  provisions  of  Federal  Rule  of  Criminal  Procedure  41. 


United  States  Attomey^s  Office 
Southern  District  of  New  York 


Sworn  to  before  me  this 
28th  day  ofFebmary,  2018 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


Ill  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 
Kgmail.com,  . 


_ ,  Maintained  at 

Premises  ConttoUed  by  Google,  hic,, 
USAO  Reference  No.  2018R00127 


Search  Warrant  and  Non-Disclosure  Order 

TO:  Google,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  Disttict  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the' provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  accounb^^^^^^^^^^@gmail.com;^^^^^|i^gmail.cam,  and 

maintained  at  premises  controlled  by  Google,  hic.,  contain  evidence, 
Suits,  and  instrumentalities  of  crime,  all  as  specified  in  Attaclnneuts  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  dnected  to  provide  to  the  Investigative  Agencies,  within  7  days  of  tire  date 
of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  n  of  Attacliments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in  Sections  IB  and  IV 
of  Attachments  A  and  B.  The  Goveinment  is  required  to  serve  a  copy  of  this  Waixant  and  Order 
on  the  Provider  witliin  7  days  of  the  date  of  issuance,  The  Warrant  and  Order  may  be  served  via 


Case  l:18-cr-00602-WHP  Document  48-5  Filed  07/18/19  Page  55  of  73 

electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of  accepting 
service. 

2.  Non-2)iscIosnre  Order.  Pui'suantto  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  wiU  result  in  destruction  of  or 
tampering  with  evidence  or  flight  firom  prosecution,  or  otherwise  wiU  seriously  jeopai'dize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence-  of  this  Waixant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a-period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  die  Court  it 
necessaiy,  except  that  Provider  may  disclose  tliis  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice, 

3.  Sealing.  It  is  finther  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  wliich 
it  was  issued,  he  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Corn!  seive  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  he  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  Y ork.  New  Y ork 


Chief  United  ,S^t?!s'Mam^-^a.te  Judge 
Southern  Disfrict',q^'N^'')(^qi3t’ 
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Email  Search  Attachment  A 
I.  Subject  Account  and  Execution  of  Warrant 

This  wan-ant  is  dhected  to  Google,  hac.  Ctbe  "Provider’O,  headguai-tered  at  1600 
Amphitlieatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  aU  content  and  otlier 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
il.com  (the  “Subject  Account”)  for  the  time  period  referenced  below. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another  - 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  tire  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  11  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  iufoimation  for  items  falling  within  the 
categories  specified  in  Section  III  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 

to  produce  the  following  infonnation  associated  with  the  Subject  Account: 

a.  Email  content.  AU  emails  sent  to  or  finm,  stored  in  draft  fonn  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
infonnation  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  Uie  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  14, 2017  and  the  date  of  this  warcant, 
inclusive. 

b.  Address  book  infojTnation.  All  address  book,  contact  list,  or  similar'  iufoimation 
associated  with  the  Subject  Account, 

c.  Subscriber  and  payment  injbrmation.  Ail  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  .limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registotion  IP  addi-ess,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  ti'ansactional  records  associated  widifhe  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1, 2014  and  the  date  of  this  warrant,  inclusive. 

e.  Customer  correspondence.  Alt  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,-  or  other  contacts  with- support  seivices 
and  records  of  actions  talcen,  limited  to  items  sent,  received,  or  created  between  December  1, 2014 
and  the  date  of  this  warrant,  inclusive. 

f.  Search  Histoiy.  All  search  history  and/or  web  history  associated  with  the  Subject 
Account,  limited  to  items  sent,  received,  or  created  between  December  1, 2014  and  the  date  of  this 

‘  warrant,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Account,  limited  to  items  sent,  received,  or  created 
between  December  1, 20 1 4  and  the  date  of  this  warrant,  inclusive. 

h.  Preseryed  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

ni.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  .attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  tliis  investigation,  and  outside  technical  experts  under  government  conti'ol)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  firuits, 
and  instrumentalities  of  violations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  de&aud 
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the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  fiiiancial  institution),  1343 
(wire  fraud),  and  1344  (bank  fi:aud),  including  the  following; 

a.  Cormnun  i  cations,  records ,  do  cuments,  and  other  file  s  neces  saiy  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medalhons; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or  - 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  hhn  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  includhi 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to dr  from  Essential  Consultants  or  Michael  D,  Cohen  &  Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 

of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  LLC, 
or  about  any  plan  or  proposal  or, agreement  for  Michael  D,  Cohen  and/or  entities  associated  with 
him  to  ti’ansfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others, 
including  and/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  leffi'ey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  pmpose  of  an  account  or  loan  at  that  financial 
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institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
tire  source  of  funds  flowing  into  an  account;  or  the  puqrose  or  nature  of  any  financial  transactions 
mvolving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was ‘accessed  or  used,  to 
determine  the  geograplric  and  chi'onological  context  of  accormt  access,  rise,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and  ‘ 

- ir  Evidence  indicating- the  Subject  Accouirt  owner’s  intent  as  it  relates  to-the-  Subject 

Offenses  under  investigation, 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedni'es  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  desigirated  “filter  team,”  separate  and  apart  fi'om  the  hrvestigative  team,  in  order  to  address 
potential  privileges. 
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Email  Search  Attachment  B 
L  Subject  Account  and  Execution  of  Warrant 

This  wanant  is  directed  to  Google,  Inc.  (the  “Provider’O,  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  contral  associated  with  the  email 
accounts  ^^|^gmail.com  (the  “Subject  Accounts”)  for  the  time 

period  between  October  1 ,  20 1 6  and  thu  date  of  this  warrant,  inclusive.  - 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  'directed  to  prodnce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  n  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  HI  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  tlie  extent  within  the  Provider’s  possession,  custody,  or  conti-ol,  the  Providei'  is  directed 

to  produce  the  following  information  associated  with  the  Subject  Accounts: 

a.  Email  content.  AH  emails  sent  to  or  from,  stored  in  di*aft  form  in,  or  othei'wise 
associated  with  tire  Subject  Accounts,  including  all  message  content,  attachments,  and  header 
infoimation  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  tire  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  informatiofi.  All  address  book,  contact  list,  or  similar'  information 
associated  with  the  Subject  Accounts. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  addi'ess,  telephone 
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number,  alternate  email  addi'esses,  registration  IP  address,  account  creation  date,  accoimt  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history, 

d.  Transactional  records.  All  transactional  records  associated  with  the  Sirbj  ect  Accounts, 
including  any  IP  logs  or  other  records  of  session  times  and  dilations. 

e.  Customer  correspondence.  All  conespondence  witli  the  subscriber  or  others  associated 
with  the  Subject  Accounts,  including  complaints,  inquhies,  or  other  contacts  with  support  services 
and  records  of  actions  takenr 

£  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Accounts. 

g.  Associated  content.  AH  Google  Docs,  files  maintamed  on  Google  Drive,  and  mstant 
messages  or  Gchats  associated  with  the  Subject.  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 

categories  of  records,  whether  created  in  response  to  a  presei-vation  request  issued  pursuant  to  1 S 
U.S.C.  §  or  otherwise. 

m.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  ofScers  and 
agents,  attorneys  for  the  goyemment,  attorney  support  staff,  agency  personnel  assisting  the 
govermnent  In  this  hrvestigation,  and  outside  technical,  experts  under  govenoment  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fiuits, 
and  insh-umentalitics  of  violations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries)^  1014  (false  statements  to  a  financial  institution),  1343 
(whe  fraud),  and  1344  (banlc  fiaud),  including  the  following: 

a.  Communications,  records,  documents,  and  otlier  files  necessary  to  establish  the  identity 
of  tire  person(s)  who  created  or  used  the  Subject  Accounts; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 

agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medEdlions,  and  any  associated  debts  or  liabilities,  to  entities  associated 

with  him; 

c.  Commimications,  records,  documents,  and  othei'  files  necessaiy  to  establish  the  id  entity 
of  airy  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
commimicated.-with  the  Subject  Accounts  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to^^^H|^|^^|uid/or  entities  associated 
with  him; 

d.  Communications  between  the  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Mehose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  air  account  or  loan  attliat  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Subject  Accormts  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  Subject  Accounts  owners’  intent  as  it  relates  to  tire  Subject 
Offenses  under  investigation. 
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IV-  Review  Protocols 

Review  of  the  items  described  in  this  Attachmeat  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  pilvilege*  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  '^filter  team,”  sepai'ate  and  apait  fi:om  the  investigative  team,  in  order  to  address 
potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERIS!  DISTRICT  OF  NEW  YORK 

In  the  Matter  of  a  Warrant  for  All  i 
Content  and  Other  Information  i 
Associated  with  the  Email  Accounts  | 

^^^^l^gmail.com,  and  ) 

Maintained 

Premises  Controlled  by  Google,  Inc.,  ■ 
USAO  Reference  No.  2018R00127  I 


18  MAG  2877 


- Search  Warrant  and  Non-Disclgsure  Order- 

TO:  Google,  Inc,  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  the  United  States 

Attorney’s  Office  for  the  Southern  Dishict  of  New  York,  and  pui'suant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C,  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Coiu-t  hereby  finds  there  is  probable 
cause  to  believe  the  email  accounts  ^^^^^^|@gmaiI.coni,  ^^^^^gmail.com,  and 

maintained  at  premises  controlled  by  Google,  Inc.,  contain  evidence, 
fruits,  and  instrumentalities  of  crhne,  all  as  specified  in  Attachments  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  dhected  to  provide  to  the  Investigative  Agencies,  within  7  days  of  the  date 
of  service  of  tlris  Warrant  and  Order,  tlie  records  specified  in  Section  II  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  persomrel  as  authorized  in  Sections  III  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  serve  a  copy  of  this  Warrant  and  Order- 
on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be  served  via 
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electronic  transmission  or  any  other  means  thi'ongh  which  the  Provider  is  capable  of  accepting 
service. 

2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C,  §  2705(b),  the  Comt  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  wairant  wall  result  in  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  tliat  the  Provider  shall  not  disclose  the 
existence  of  this  Wairant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessai'y,  except  that  Provider  may  disclose  this  Wamant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3,  Sealing.  It  is  further  ordered  that  this  WaiTant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  seive  the  Wanant  and  Order  on  tlie  Provider;  provide  copies  of  the  Affidavit  or  WaiTant  and 
Order  as  need  be  to  personnel  assisting  the  Government  In  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  tins  matter. 

DatediNew  York,  New  York 


Date  Issued 


Time  Issued 


HONORABLE  IfENRY  B.  PITMAN 
UNITED  STATES  MAGISTRATE  JUDGE 
Southern  Dishict  of  Neiv  York 


2017.03 J25 
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Email  Search  Attachment  A 

I.  Subject  Account  and  Execution  of  Warrant 

This  waiTant  is  dii'ected  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
il.com  (the  “Subject  Account”)  for  the  time  period  referenced  below. 

A  law  enforcement  officer  will  sei-ve  this  wairant  by  Pansmitting  it  via  email  or  another 
appropriate  maimer  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electi’onic  copy  of  the  infoimation  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  infomiation  for  items  falling  within  tlie 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  followmg  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  14,  2017  and  Februaiy  28,  2018, 
inclusive. 

b.  Address  book  information.  All  address  book,  contact  list,  or  similai'  infonnation 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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niuBbei,  alternate  email  addresses,  registi’ation  IP  address,  accomit  creation  date,  account  status, 
length  of  sei-vice,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  ti'ansactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1, 2014  and  Februaiy  28, 2018,  inclusive. 

e.  Customer  correspondence.  All  coiTespondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  talcen,  limited  to  items  sent,  received,  or  created  between  December  1, 2014 
and  February  28,  2018,  inclusive. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Accormt,  limited  to  items  sent,  received,  or  created  between  December  1,  2014  and  Febiaiary  28, 
2018,  inclusive. 

g.  Associated  content.  All  Google  Docs,  fdes  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Account,  limited  to  items  sent,  received,  or  created 
between  December  1,  2014  and  February  28,  2018,  inclusive. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

Ill,  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
govermnent  in  this  investigation,  and  outside  teclmical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fi'uits. 
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and  instiiimentalities  of  18  U.S.C.  §§  371  (conspii’acy  to  commit  offense  or  to  defraud  the  United 
States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343  (wire 
fraud),  and  1344  (bank  fi-aud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  witli  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to^^^^^^^^^|and/or 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  Commruiications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 

of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  LLC, 
or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities  assoeiated  with 
him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others, 
including  and/or  entities  associated  with  him; 

f.  Commmiications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Miclrael 
D.  Cohen’s  banlt  accounts,  taxes,  debts,  and/or  finances; 
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g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  puipose  of  an  account  or  loan  at  that  fmancial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  som'ce  of  funds  flowing  into  an  account;  or  the  puipose  or  natui'e  of  any  fmancial  Pansactions 
involving  diat  fmancial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
detenu ine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pui’suant  to  established 
procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect  any  attorney- 
client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include  use  of  a 
designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  addi'ess 
potential  privileges. 
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Email  Search  Attachment  B 

I.  Subject  Account  and  Execution  of  Warrant 

This  wairant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquailered  at  1600 
Amphitheati-e  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
infonnation  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email 
accounts^^|@gmail.com  and  (the  “Subject  Accounts”)  for  the  time 

period  between  October  1, 2016  and  Februai'y  28,  2018,  inclusive, 

A  law  enforcement  officer  will  serve  this  waiTant  by  ti-ansmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  tire  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  11  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  wiU  review  the  infonnation  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 

to  produce  the  following  information  associated  with  the  Subject  Accounts: 

a.  Email  content.  All  emails  sent  to  or  fi'om,  stored  in  di-aft  form  in,  or  otherwise 
associated  with  the  Subject  Accomits,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  tlie  som'ce  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  addi'ess  book,  contact  list,  or  similai-  infonnation 
associated  with  the  Subject  Accounts. 
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c.  Subscriber  and  payment  information.  All  subscriber  and  payment  infomiation 
regai'ding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  address,  telephone 
number,  alternate  email  addi'esses,  regishation  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  seiTices  utilized,  means  and  souiee  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Accounts, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  coiTespondence  with  the  subscriber  or  others  associated 
with  the  Subject  Accounts,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken, 

f.  Search  History.  All  search  history  and/or  web  liistory  associated  with  the  Subject 
Accounts. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  presei-vation  request  issued  pursuant  to  1 8 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  goveimuent,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  tliis  investigation,  and  outside  technical  experts  under  govenunent  conb’ol)  ai-e 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fimits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §§371  (conspiracy  to  cormnit  offense  or  to  defraud 
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the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fiaud),  including  the  following; 

a.  Communications,  records,  documents,  and  other  fdes  necessary  to  establish  the  identity 
of  tire  persou(s)  who  created  or  used  the  Subject  Accounts; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  Irim  to  hansfer  any  interest  in  taxi 


medallions,  and  any  associated  debts  or  liabilities,  toj 
with  him; 


and/or  entities  associated 


c.  Commimications,  records,  documents,  and  other  files  necessary  to  esfablish  the  identity 
of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Subject  Accounts  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D,  Cohen  and/or  entities  associated  with  him  to  hansfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to^^^^^^^^^|and/or  entities  associated 
with  him; 


d.  Communications  between  the  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Banlc,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Cormnunications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  instihition  witlr  relation  to  the  intended  puipose  of  an  accoiuit  or  loan  at  that  financial 
institution;  the  nature  of  any  busmess  or  entity  associated  with  an  account  at  a  financial  instihition; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 
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f.  Evidence  indicating  how  and  when  the  Subject  Accounts  was  accessed  or  used,  to 
determine  tlie  geogi’aphic  and  clmonological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  hidicating  the  Subject  Accounts  owners’  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedm-es  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  Wlien  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SONY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 
In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case 

Three  Electronic  Devices,  See  Attachment  A  ^ 

) 

SEARCH  AND  SEIZURE  WARRANT 

Y'oY~~'Any'authorized:law^fe  — - — ■“■■■■■""  - - - 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
ofthe  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)'. 

Three  Electronic  Devices,  See  Attachment  A 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)  \ 

See  Attachment  A  , , :  i  .1  ) ' ;  1 , , 

I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search,  and  sdize  the  person  or 
property.  zV’  .  '  / 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  ,/B-  ■  .  ‘  ; 

‘  \  (not  to  exceed  14  days) 

□  in  the  daytime  6:00  a.m.  to  10  p.m.  sT  at  any  time  in  the  day  or  night  as  I  ’find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  ofthe  warrant  aiid  ^'receipt  fot  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  hhd  receipt  at  the 
place  where  the  property  was  taken. 


The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  wap-ant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Cltirk  of  theUourt.  ^ 

y/  Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  bj/^  the  Gibrk  of  the  Court: 


USMJ  Initials 


Sf  i  find  that  immediate  notification  may  have  an  adverse  result  listed  in  i  S  §  2705'(exeept  for  delay 

of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  thd  ;^erson  who,  or  whose- propeiiy,  will  be 
ox  (check  the  appropriate  box)  Sffor  30  days  (not  to  exceed  $0),  \  '  ' 

□until,  the  facts  justifying,  the  latei:  specific  date  of 


Date  and  time  issued:  ^ 


Judge 's  sighdtuH 


-7^ 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  wanrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ 

Executing  officer 's  signature 


Printed  name  and  title 
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Attachment  A  t 

I.  Devices  to  be  Searched 

The  devices  to  be  searched  (the  “Subject  Devices”)  are  described  as:  j 

a.  Subject  Device- 1 :  A  black  and  red  USB  drive  with  a  white  label  that  says  “Tracking  | 

#:  180208140208.”  j 

h.  Subject  Device-2:  A  silver  DVD  with  a  white  label  that  reads  “Cohen  — 

2018.03.07.”  j 

c.  Subject  Device-3:  A  white  DVD  labelled  “2-28-18  Cohen  SW  Returns  —  Google  f 

_ _ and  l&l.”  . . - .  . - . .  --  -  _  I 

I 

n.  Reviev*'  of  ESI  on  the  Subject  Devices 

I 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents,  k 

and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings,  j 

attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in  j? 

this  investigation,  mterpreters,  and  outside  vendors  or  technical  experts  under  government  control)  p 

are  authorized  to  review  the  ESI  contained  on  the  Subject  Devices  for  evidence,  fiuits,  and  | 

instrumentalities  of  one  or  more  violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l)  |j 

(illegal  campaign  contributions)  (the  “Subject  Offense”),  as  listed  below:  j 

r 

I 

a.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their  1 

I 

I 

I 

agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  | 

j 

documents,  and  any  communications  related  to  such  agreements.  I 

b.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or  J 

agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen 
McDougal,  or  payments  to  Stephanie  Clifford  or  Karen  McDougal. 

c.  Evidence  of  communications  with  American  Media,  Inc.,  David  Pecker,  and/or  \ 

Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie  Clifford,  j 

and/or  Karen  McDougal.  I 

d.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or  [ 

consultation  with  the  Trump  Campaign.  ! 
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e.  Evidence  of  commimications  with  Donald  Trump  and/or  agents  or  associates  of  the  t 

f 

Trump  Campaign  about  the  Access  Hollywood  tape.  * 

f.  Evidence  relating  to  Cohen’s  Icnowledge  of  the  campaign  finance  laws,  campaign  ' 

contribution  reporting  requirements,  and  campaign  contribution  limits.  | 

g.  Evidence  indicating  Michael  Cohen’s  intent  with  respect  to  the  Subject  Offense, 
including  whether  the  payment  to  Clifford  and  any  similar  payments  were  made  to 
influence  the  Presidential  election. 


2 
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AO  106  (Rev.  06/09)  Application  for  a  Search  Warrant 


United  States  District  Court 


for  the 

Southern  District  of 


In  the  Matter  of  the  Search  of 


(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Three  Electronic  Devices,  See  Attachment  A 


Case  No. 


APPLICATION  FOR  A  SEARCH  WARRANT 


h  a  federal  law  enforcement  officer  or  an  attorney  for  the  government,  request  a  search  warrant  and  state  under 
penalty  of  perjury  that  I  have  reason  to  believe  that  on  the  following  person  or  property  (identify  the  person  or  describe  the 
Dwmrtv  to  bejearched  and.eiveJts  locationlL.  _  _ 


vSee  Attach  ment-A- 


located  in  the 


Southern 


District  of 


New  York 


,  there  is  now  concealed  (identify  the 


person  or  describe  the  property  to  be  seized)', 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 

The  basis  for  the  search  under  Fed.  R.  Crim.  P,  41(c)  is  (check  one  or  more)'. 
sf  evidence  of  a  crime; 

□  contraband,  fruits  of  crime,  or  other  items  illegally  possessed; 

□  property  designed  for  use^  intended  for  use,  or  used  in  committing  a  crime; 

□  a  person  to  be  arrested  or  a  person  who  is  unlawfully  restrained. 

The  search  is  related  to  a  violation  of: 


Offense  Description 


Code  Section 

52  DSC  301 1 6(a)(1  )(A),  301 09  Illegal  campaign  contributions 
(d)(1)(A)(1) 


The  application  is  based  on  these  facts: 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 

fif  Continued  on  the  attached  sheet. 

Delayed  notice  of  30  days  (give  exact  ending  date  if  more  than  30  days: 
under  1 8  U.S.C.  §  3103a,  the  basis  of  which  is  set  forth  on  the  attached  sheet 


)  is  requested 


Sworn  to  before  me  and  signed  in  my  presence. 

Date:  V-  .7- 

City  and  state:  A/ 0'^  d/ 


.  '  Judge  ’s  signature 

Hon.  Henry  B.  Ritihan,  U.S.  Magistrate  Judge 
Printed  hame  and  title 
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TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  a  Search  Warrant 


Special  Agent  of  the  United  States  Attorney’s  Office  for  the  Southern 

DiMfict  of  New^YarLX‘‘US7ro’’)7heih^uryswdihrd^hses  and  says: 

I.  Introduction 
A.  Affiant 

1 .  I  have  been  a  Special  Agent  with  the  U S  AO  since  August  2016.  I  previously  served 
as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector  General  from  May  201 1 
to  August  2016.  In  the  course  of  my  experience  and  training  in  these  positions,  I  have  participated 
in  criminal  investigations  into  federal  offenses  involving  a  wide  array  of  financial  crimes, 
including  frauds  on  financial  institutions,  and  have  been  involved  in  investigations  involving 
violations  of  campaign  finances  laws  and  regulations.  I  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  search  of  email  accounts  and  electronic 
devices. 

2.  I  make  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 
Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  electronic  devices  specified  below  (the 
“Subject  Devices”)  for  the  items  and  information  described  in  Attachment  A.  This  affidavit  is 
based  upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my 
conversations  with  other  law  enforcement  personnel;  and  my  training,  experience  and  advice 
received  concerning  the  use  of  computers  in  criminal  activity  and  the  forensic  analysis  of 


UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  Of  America  for  a  Search  Warrant  for  Three 
Electronic  Devices,  USAO  Reference  No 
2018R00127 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 
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electronically  stored  information  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited 
purpose  of  establishing  probable  cause,  it  does  not  include  all  the  facts  that  I  have  learned  during 
the  course  of  my  investigation.  Where  the  contents  of  documents  and  the  actions,  statements,  and 
conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in  part,  except  where 
otherwise  indicated. 

B.  Prior  Warrants  and  the  Subject  Devices 

3.  The  USAO  and  the  Federal  Bureau  of  Investigation  (“FBI”)  have  been 
investigating,  among  other  things,  a  scheme  by  Michael  Cohen  to  defraud  multiple  banks.  Cohen 
is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald  Trump, 
and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization,  an 
international  conglomerate  with  real  estate  and  other  holdings. 

4.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails  and 
other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically; 

a.  On  or  about  July  18, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  account^^^^^^^|^gmail.com  (the  “Cohen  Gmail  Accounf ’)  sent  or  received 
between  January  1,  2016  and  July  18,  2017.  This  warrant,  which  is  numbered  17-mj-00503,  is 
attached  as  Exhibit  A  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant 
for  content  stored  in  the  iCloud  account  associated  with  Apple  ID  ^^^^^^|@gmail.com  (the 
“Cohen  iCloud  Account”).  This  warrant,  which  is  numbered,  17-mj-00570,  is  attached  as  Exhibit 
D  (the  “Cohen  iCloud  Warrant”). 
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c.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 
warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 
November  13, 2017.  This  warrant,  which  is  numbered  17-mj-00855,  is  attached  as  Exhibit  B  (the 
“Second  Cohen  Gmail  Warrant”). 

d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 
warrant  for  emails  in  the  account^^^^^^^^^^^^^^the  “Cohen  MDCPC  Account”)  sent  or 
received  between  the  opening  of  the  Cohen  MDCPC  Account^  and  November  13,  2017.  This 
warrant,  which  is  numbered  17-mj-00854,  is  attached  as  Exhibit  C  (the  “First  Cohen  MDCPC 
Warrant”). 

5.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
US  AO,  which  is  worldng  with  the  FBI’s  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  First  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  Warrant.  On  or  about  March  7,  2018,  the  SCO  provided  the  USAO 
with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  Warrant.^  A  filter  team 
working  with  the  SCO  had  previously  reviewed  the  content  produced  pursuant  to  these  warrants 
for  privilege. 

6.  On  or  about  February  28,  20 1 8,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  Cohen  Gmail  Account  and  Cohen  MDCPC  Account,  among  other  accounts,  sent  or 

^  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  accoxmt  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 

^  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  February 
2, 2018. 
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received  between  November  14,  2017  and  February  28,  2018.  These  warrants,  which  are  both 
numbered  1 8  Mag.  1696,  are  attached  as  Exhibits  E  (the  “Third  Cohen  Gmail  Warrant”)  and  F  (the 
“Second  Cohen  MDCPC  Warrant”),  respectively.  The  content  produced  pursuant  to  these 
warrants  is  being  reviewed  for  privilege  by  an  SDNY  filter  team. 

7.  The  search  warrants  described  above  are  referred  to  collectively  herein  as  the  “Prior 
Warrants.” 

8.  The  returns  of  the  Prior  Warrants  are  presently  contained  on  three  electronic 
devices.  In  particular: 

a.  Subject  Device-1:  The  non-privileged  emails  and  content  returned  in 
response  to  the  First  Cohen  Gmail  Warrant,  the  Second  Cohen  Gmail  Warrant,  and  the  First  Cohen 
MDCPC  Warrant  are  contained  on  Subject  Device- 1,  which  is  particularly  described  as  a  black 
and  red  USB  drive  with  a  white  label  that  says  “Tracking  #:  180208140208.” 

b.  Subject  Device-2:  The  non-privileged  content  returned  in  response  to  the 
Cohen  iCloud  Warrant  is  contained  on  Subject  Device-2,  which  is  particularly  described  as  one 
silver  DVD  with  a  white  label  that  reads  “Cohen  —  201 8.03.07.” 

c.  Subject  Device-3:  The  content  returned  in  response  to  the  Third  Cohen 
GmaU  Warrant  and  the  Second  Cohen  MDCPC  Warrant  is  contained  on  Subject  Device-3,  which 
is  particularly  described  as  one  white  DVD  labelled  “2-28-18  Cohen  SW  Returns  —  Google  and 
l&l.” 

9.  The  Subject  Devices  are  presently  located  in  the  Southern  District  of  New  York. 

C.  The  Subject  Offenses 

10.  The  affidavits  in  support  of  the  Prior  Warrants  describe  evidence  of  several 
different  courses  of  conduct  by  Cohen,  including,  among  other  things,  false  statements  to  financial 

institutions  relating  to  the  purpose  of  an  account  he  opened  in  the  name  of  Essential  Consultants 
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LLC  and  the  nature  of  funds  flowing  into  that  account;  false  statements  and  fraudulent  omissions 
by  Cohen  in  connection  with  this  attempt  to  refinance  his  debts  with  certain  financial  institutions; 
and  activities  undertaken  by  Cohen  on  behalf  of  certain  foreign  persons  or  foreign  entities  without 
having  registered  as  a  foreign  agent.  The  Prior  Warrants  accordingly  define  the  evidence  to  be 
seized  by  reference  to  subject  offenses  and  specific  categories  of  information  related  to  these 


courses  of  conduct.  The  subject  offenses  in  the  Prior  Warrants  are  summarized  as  follows: 


Exhibit 

Warrant 

3 

Subiect  Offenses  in  Prior  Warrant 

A 

First  Cohen  Gmail 

18  U.S.C.  §§371  (conspiracy  to  defraud  the  United  States),  1005  (false 

Warrant 

bank  entries),  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (banlc  fraud),  1956  (money  laundering),  951  (acting  as  an 
unregistered  foreign  agent),  and  22  U.S.C.  §§611  etseq.  (Foreign  Agents 
Registration  Act  (“FARA”)) 

B 

Second  Cohen  Gmail 
Warrant 

18  U.S.C.  §§371  (conspiracy  to  defraud  the  United  States),  1005  (false 
bank  entries),  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (bank  fraud),  1956  (money  laundering),  951  (acting  as  an 
unregistered  foreign  agent),  and  22  U.S.C.  §§  61 1  seq.  (FARA) 

C 

Cohen  MDCPC  Warrant 

18  U.S.C.  §§371  (conspiracy  to  defraud  the  United  States),  1005  (false 
bank  entries),  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (bank  fraud),  1956  (money  laxmdering),  951  (acting  as  an 
unregistered  foreign  agent),  and  22  U.S.C.  §§611  etseq.  (FARA) 

D 

Cohen  iCloud  Warrant 

18  U.S.C.  §§  1014  (false  statement  to  financial  institution),  1344  (bank 
fraud),  1956  (money  laundering),  951  (acting  as  an  unregistered  foreign 
agent),  and 22  U.S.C.  §§  611  etseq.  (FARA) 

E 

Third  Cohen  Gmail 
Warrant 

18  U.S.C. §§371  (conspiracy  to  commit  offense  or  to  defraud  the  United 
States),  1005  (false  bank  entries),  1014  (false  statements  to  financial 
institution),  1343  (wire  fraud),  1344  (banlc  fraud) 

F 

Second  Cohen  MDCPC 
Warrant 

18  U.S.C. §§371  (conspiracy  to  commit  offense  or  to  defraud  the  United 
States),  1005  (false  bank  entries),  1014  (false  statements  to  financial 
institution),  1343  (wire  fraud),  1344  (bank  fraud) 

1 1 .  Based  on  my  participation  in  this  investigation,  including  my  review  of  documents 
obtained  pursuant  to  subpoena  and  court  order,  my  conversations  with  witnesses  and  review  of 
reports  of  conversations  with  witnesses,  and  my  review  of  publicly  available  information,  I  have 


^  On  or  about  February  28, 2018,  the  USAO  sought  and  obtained  a  Rule  41  warrant,  authorizmg  it 
to  expand  its  search  of  the  email  returns  for  the  warrants  attached  as  Exhibits  A-C  (the  First  Cohen 
Gmail  Warrant,  Second  Cohen  Gmail  Warrant,  and  First  Cohen  MDCPC  Warrant)  for  additional 
offenses  not  authorized  in  the  original  warrants  for  those  accounts.  The  below  chart  therefore  lists 
both  the  subject  offenses  listed  in  the  original  warrants  for  these  accounts  and  the  subject  offenses 
authorized  in  the  February  28,  2018  warrant. 
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learned  of  evidence  of  an  additional  Subject  Offense  committed  by  Cohen,  described  below,  which 
was  not  listed  in  the  Prior  Warrants."^ 

12.  I  am  therefore  requesting  authority  to  expand  the  search  of  the  returns  of  the  Prior 
Warrants,  as  contained  on  the  Subject  Devices,  for  evidence  related  to  the  additional  Subject 
Offense.  As  set  forth  below,  in  addition  to  the  categories  of  evidence  aheady  described  in  the 
Prior  Warrants,  there  is  probable  cause  to  believe  that  the  Subject  Devices  contain  evidence  of 
violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offense”).^ 

II.  Probable  Cause  Regarding  the  Subject  Offense 

13.  As  set  forth  above,  the  USAO  and  the  FBI  have  been  investigating,  among  other 
things,  a  scheme  by  Michael  Cohen  to  defraud  multiple  banks.  During  the  course  of  this 
investigation,  the  USAO  and  FBI  have  obtained  evidence  that  Cohen  has  also  committed  a  criminal 
violation  of  the  campaign  finance  laws  by  making  an  excessive  in-kind  contribution  to  the 
presidential  election  campaign  of  then-candidate  Donald  Trump  in  the  form  of  a  $  1 30,000  payment 
to  Stephanie  Clifford,  an  individual  who  was  rumored  to  have  had  an  extramarital  affair  with 
Trump,  in  exchange  for  her  agreement  not  to  disclose  that  alleged  affair.  As  set  forth  below,  there 
is  probable  cause  to  believe  that  this  payment  was  intended  to  keep  Clifford  from  making  public 
statements  about  the  rumored  affair  on  the  eve  of  the  2016  presidential  election,  and  thus 
constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 


^  As  set  forth  below,  I  base  this  application  in  part  on  my  review  of  emails  and  text  messages 
obtained  pursuant  to  the  Prior  Warrants.  Each  of  the  cited  emails  or  texts  messages  is  either 
responsive  to  the  applicable  Prior  Warrant  and/or  was  discovered  in  plain  view  during  a  review  of 
the  emails  or  texts  returned  pursuant  to  the  applicable  Prior  Warrant. 

^  The  Prior  Warrants  describe  categories  of  information  that  likely  encompass  evidence  of  the 
additional  Subject  Offense.  Nevertheless,  in  an  abundance  of  caution,  I  am  seeking  explicit 
authorization  to  search  the  Subject  Devices  for  evidence  of  the  Subject  Offense. 
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14.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  1 1 ,  201 1 ,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  E!  News  that  “[t]he  totally  untrue  and  ridiculous  story  . . .  emanated  from 

a  sleazy  and  disgusting  website _ The  Trump  Organization  and  Donald  J.  Tramp  will  be  bringing 

a  lawsuit .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

15.  On  or  about  June  16,  2015,  Tramp  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4,  2016,  Trump  became  the  presumptive  Republican  Party  nominee 
for  president,  and  on  July  19,  2016,  Tramp  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Tramp  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Tramp  or  his  campaign.  For  instance,  on  or  about  August  18,  2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 
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16.  On  or  about  October  7,  2016,  The  Washington  Post  published  online  a  video  and  [ 

accompanying  audio  in  which  Trump  referred  to  women  in  what  the  article  described  as  “vulgar 
terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The 
following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he  stated,  among  other 
things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  knows  me  knows  these  words  don’t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that 
representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

17.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Slate 
magazine  by  a  reporter  who  interviewed  Clifford,  that  around  this  same  time,  in  or  about  October 
2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and  Slate  magazine, 
among  other  media  sources,  to  provide  these  media  outlets  with  her  statement  about  her  alleged 
relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author  based  on' 
conversations  'with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to  be  paid  for 
her  story  or  be  paid  by  Trump  not  to  disclose  her  aeeusation.  As  ,  Cohen  summarized  in  a  2018 
email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  October  2016,  I  was  contacted  by 
counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuiug  the  201 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

18.  From  my  review  of  telephone  toll  records®  and  information  produced  pursuant  to 
the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 

®  My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  obtained  from  Cohen’s  telephone 
pursuant  to  the  iCloud  Warrant. 
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Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 
Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer^  Trump,  and  Hope  Hicks,  who  was  then 
press  secretary  for  Trump’s  presidential  campaign.  Based  on  the  timing  of  these  calls,  and  the 
content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 20 1 6,  at  approximately  7 :20  p  .m. ,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes.® 
Based  on  the  toll  records  that  the  US  AO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 
Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 
in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 


’  Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

®  I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  mmutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  sis  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
beheve  that  when  Howard  vwote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:31  a.m.,  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake, 
please  call  my  cell.” 
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I 

I 

f.  The  following  day,  on  October  10, 2016,.  at  10:58  a.m.,  Howard  sent  a  text  message  | 

to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regards  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanks.  Dylan.  Over  to  you  two.”  At  1 2:25  p.m.,  Davidson  sent  Cohen  a  text  message 
that  stated:  “Michael  —  if  we  are  ever  going  to  close  this  deal  —  In  my  opinion,  it  needs  to  be  today. 

Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “chent”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.^ 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  10, 2016,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 
according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 

^  As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 

However,  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving 
the  negotiation  of  a  pa)mient  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  Clifford. 

Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10,  2016. 

19.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  First 
Republic,  as  well  as  my  participation  in  interviews  with  First  Republic  employees,  I  have  learned 
the  following: 

a.  On  the  morning  of  October  1 3, 201 6,  at  8 : 54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 

b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  a  banker  at  First  Republic 
Bank  (“First  Republic  Employee-2”).  The  email  attached  documents  from  the  Secretary  of  State 
of  Delaware  indicating  that  Cohen  had  formed  a  limited  liability  company  called  “Resolution 
Consultants  EEC”  on  September  30, 2016.  As  noted  above,  “Resolution  Consultants”  is  the  name 
of  the  entity  that  Cohen  had  told  Howard  he  had  formed  recently  after  Howard  said  Davidson 
would  “do  it.”  At  10:44  a.m.,  Cohen  called  First  Republic  Employee-2  and  told  him,  in  sum  and 
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substance,  that  he  needed  an  account  in  the  name  of  “Resolution  Consultants”  opened  immediately, 
and  that  he  did  not  want  an  address  on  the  checks  written  out  of  the  account.  Later  that  day,  another 
employee  at  First  Republic  emailed  Cohen  account  opening  paperwork  to  complete.  Cohen 
returned  the  account  opening  documents  partially  completed,  but  failed  to  provide  a  copy  of  his 
driver’s  license  or  passport,  and  did  not  respond  to  the  employee’s  question  of  how  he  wanted  to 
fund  the  accoimt.  As  a  result,  the  account  was  never  opened. 

c.  On  October  1 7, 20 1 6,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

20.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford, 
and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
iCloud  Warrant,  and  public  sources,  I  loiow  the  following: 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’s  email  account  hosted  by  the  Trump  Organization,  on  October  17, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
if  Cohen  did  not  complete  the  transaction.  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 


Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  Government  has  not 
requested  documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the 
email  referenced  in  this  article. 
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b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told 

they’re  going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

v.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taking  my 
calls.”  Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach?” 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 
investigation,  I  understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 
article  noted  that  Clifford  had  declined  to  comment. 
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21.  On  or  about  October  25,  2016,  the  communications  between  Cohen,  Davidson, 
Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford. 
Specifically,  based  on  my  review  of  toll  reeords,  information  obtained  pursuant  to  the  Cohen  Email 
Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  publie  sources,  I  have  learned  the  following: 

a.  On  Oetober  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  railing  you  urgently.  We  have  to  eoordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  eaeh  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  eonneeted.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 
minutes.  At  7:1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  Oetober  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  ealled  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9:04  a.m. — ^less  than  thirty  minutes  after  speaking  with  Trump — 
Cohen  sent  two  emails  to  the  person  who  had  ineorporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  reeeipt”  and  then,  in  the  second 
email,  “for  Essential  Consultants  EEC.”  That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  First  Republic  Employee-2  and  told  him,  in  sum 
and  substance,  that  he  deeided  not  to  open  an  account  in  the  name  of  “Resolution  Consulting”  and 
instead  would  be  opening  a  real  estate  consulting  company  in  the  name  of  “Essential  Consultants.” 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Trump  Tower,  and  wanted  to  go  to  a  First 
Republic  branch  across  the  street  to  open  the  aeeount,  so  First  Republic  Employee-2  called,  a 
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preferred  banlcer  at  that  branch  (“First  Republic  Employee- 1”),  to  assist  Cohen.  At  11:00  a.m., 
First  Republic  Employee-1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First 
Republic  Employee-1 ,  that  around  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower — 
on  the  same  floor  as  the  Trump  Organization — and  went  through  account  opening  questions, 
including  know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account — ^the  answers  to  which  First  Republic 
Employee- 1  entered  into  a  form — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based  on  my  review  of  records  obtained  from  First  Republic,  it  appears  that  this  account  (the 
“Essential  Consultants  Account”)  was  created  at  a  time  between  1 1 :00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Bank. 

f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Repubhc  to  the 
Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October  26, 
2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Accoimt. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
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and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker jagain  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asldng  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmad  for  email  from  my  private  accoimt.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  chent  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  EEC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 

22.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000 — with  the 
funds  intended  for  Clifford — for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
toll  records,  bank  records,  and  information  obtauied  pursuant  to  the  iCloud  Warrant  and  Cohen 
Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 
the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  accoimt 
imtil  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  EEC.  I  thank  you  in  advance  for 
your  assistance  and  look  forward  to  hearing  from  you  later.” 
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b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account — 
which  had  been  fimded  a  day  prior  from  Cohen’s  home  equity  line  of  credit — ^to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  LLC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  10:50  a.m..  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 

23.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction 
with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant 
to  the  iCloud  Warrant,  public  sources,  and  bank  records,  I  know  the  following: 

a.  On  October  28, 20 1 6,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 


19 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  24  of  80 


we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  20 1 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  [Dennison]”  in  exchange  for 
$130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson’s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 
LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in  the 
agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  hank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
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address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

24.  On  November  4, 20 1 6,  just  three  days  after  the  Clifford  transaction  was  completed 
and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an  article 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Tmmp  had  an  affair.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — just  days  before  Election 
Day — ^about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent  Howard 
a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump  Organization 
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lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 
want  to  push  her  over  the  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  aplausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
plausible  position  that  she  is  rightfully  employed  as  a  colunmist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated  “he’s 
pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
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publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment  from 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across.  The  next 
morning  onNovember  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far  I  see  only 
6  stories.  Getting  little  to  no  traction.”  Hides  responded,  “Same.  Keep  praying!!  It’s  working!” 
Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
statement  by  Storm  denying  everything  and  contradicting  the  other  pom  stars  statement.  I  wouldn’t 
use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on  my 
involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced  recorded 
audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a  statement 
could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but  was  unnecessary  at  that 
time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that  morning.  Pecker 
spoke  to  Trump. 


23 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  28  of  80 


25.  On  or  about  November  8, 2016,  Trump  won  the  election  for  President  of  the  United 

States. 

26.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  government 
watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 


have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  brealdng.  I  loiew  the  allegation  to  be  false,  but  I  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn  ’t 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  fhnds.  I  did  this  through  my  Delaware  EEC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  ("\..the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  ftom  breaking”  again  in  October  201 6. 
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b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times  f 

I 

I 

that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with  j 

Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a  ' 

campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including  r 

whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar  f 

payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 

Trump  had  reimbursed  bim,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the  I, 

I 

,  .  ^ 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  m  response,  “I  can’t  I 

get  mto  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 

that:  “In  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to  facilitate  a  payment  of 

I 

$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign  ' 

was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either  | 

directly  or  mdirectiy.” 

d.  On  or  about  March  9,  201 8,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 

from  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.”  : 

27.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that  ! 

Cohen  committed  violations  of  the  Subject  Offense  by  making  an  in-kind  contribution  to  Trump 
or  the  Trump  campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the  election. 

Indeed,  while  he  denies  having  given  an  unlawful  contribution,  in  bis  own  statements  Cohen  has  i 

admitted  that  he  paid  $1 30,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment  occurred  ! 

less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations  about  5 

f 

his  behavior  toward  women,  even  though  allegations  of  an  affair  between  Trump  and  Clifford  t 
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existed  since  2011.  In  addition,  the  communication  records  set  forth  above  make  evident  that 
Cohen  communicated  with  members  of  the  Trump  campaign  about  his  negotiation  with 
Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

28.  Therefore,  there  is  probable  cause  to  believe  that  a  search  of  the  Subject  Devices 
will  reveal  evidence,  fruit  and  instrumentalities  of  the  Subject  Offenses,  including  the  following: 

a.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or 
their  agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related 
documents,  and  any  communications  related  to  such  agreements. 

b.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump 
and/or  agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal, 
or  payments  to  Stephanie  Clifford  or  Karen  McDougal. 

c.  Evidence  of  communications  with  American  Media,  Inc.,  David  Pecker, 
and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie  Clifford,  and/or 
Karen  McDougal. 

d.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination 
or  consultation  with  the  Trump  Campaign. 

e.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or 
associates  of  the  Trump  Campaign  about  the  Access  Hollywood  tape. 

f.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws, 
campaign  contribution  reporting  requirements,  and  campaign  contribution  limits. 
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g.  Evidence  indicating  Michael  Cohen’s  intent  with  respect  to  the  Subject 
Offense,  including  whether  the  payment  to  Clifford  and  any  similar  payments  were  made  to 
influence  the  Presidential  election. 

in.  Procedures  for  Searching  ESI 
A.  Review  of  ESI 

29.  Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and 
agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related 
proceedings,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under 
government  control)  will  review  the  ESI  contained  on  the  Subject  Devices  for  information 
responsive  to  the  warrant. 

30.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  methods  to 
locate  evidence,  fruits,  and  instramentalities  of  the  Subject  Offense,  including  but  not  lunited  to 
undertakmg  a  cursory  inspection  of  all  emails,  texts  or  files  contained  on  the  Subject  Devices.  This 
method  is  analogous  to  cursorily  mspecting  all  the  files  in  a  file  cabinet  in  an  office  to  determine 
which  paper  evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other 
methods  as  well,  particularly  including  ke3word  searches,  I  know  that  ke5word  searches  and 
similar  methods  are  typically  inadequate  to  detect  all  information  subject  to  seizure.  As  an  initial 
matter,  ke)word  searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated 
with  emails,  including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store 
data  as  searchable  text.  Moreover,  even  as  to  text  data,,  ke5word  searches  cannot  be  relied  upon 
to  capture  all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of 
the  unique  words  or  phrases  that  investigative  subjects  will  use  in  their  communications,  and 
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consequently  there  are  often  many  communications  in  an  accoimt  that  are  relevant  to  an 
investigation  but  that  do  not  contain  any  keywords  that  an  agent  is  likely  to  search  for. 

IV.  Conclusion  and  Ancillary  Provisions 

3 1 .  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachment  A  to  this  affidavit  and  to  the  Search  and  Seizure 
Warrant. 

32.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  and  for  the 
reasons  more  fully  set  forth  in  the  Accompanying  Affidavit,  I  respectfully  request  that  this  affidavit 
and  all  papers  submitted  herewith  be  maintained  under  seal  until  the  Court  orders  otherwise. 


Special  Agent,  USAO 


Sworn  to  before  me  on 


7th  day  of  April,  20,1,  S  :  1 1 1 , , 


HON.  HENEY,B-  PliAPN  v  i  V 
UNTTEDi  SiAir^hy.GIS;MTE  JUDGE 


i 
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Attachment  A 

I.  Devices  to  be  Searched 

The  devices  to  be  searched  (the  “Subject  Devices”)  are  described  as: 

a.  Subject  Device- 1 :  A  black  and  red  USB  drive  with  a  white  label  that  says  “Tracking 
#:  180208140208.” 

b.  Subject  Device-2:  A  silver  DVD  with  a  white  label  that  reads  “Cohen  — 
2018.03.07.” 

c.  Subject  Device-3:  A  white  DVD  labelled  “2-28-18  Cohen  SW  Returns  —  Google 

and  l&l.” . . . . . .  -  - 


n.  Review  of  ESI  on  the  Subject  Devices 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under  government  control) 
are  authorized  to  review  the  ESI  contained  on  the  Subject  Devices  for  evidence,  fruits,  and 
instrumentalities  of  one  or  more  violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Subject  Offense”),  as  listed  below: 

a.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related 
documents,  and  any  communications  related  to  such  agreements. 

b.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen 
McDougal,  or  payments  to  Stephanie  Clifford  or  Karen  McDougal. 

c.  Evidence  of  communications  with  American  Media,  Inc.,  David  Pecker,  and/or 
Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie  Clifford, 
and/or  Karen  McDougal. 

d.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 
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e.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape. 

f.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

g.  Evidence  indicating  Michael  Cohen’s  intent  with  respect  to  the  Subject  Offense, 
including  whether  the  payment  to  Clifford  and  any  similar  payments  were  made  to 
influence  the  Presidential  election. 
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Exhibit  A 
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AO  93  (Rev,  1 1/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 


KiEP 

21  201? 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

INFORMATION  ASSOCIATED  WITH  THE  EMAIL 
ACCOUNT^^^^^HmGiVIAILCOM 


Assl9neaTo:H8we«,BerylA. 

an.  seizure  warrant 


SEARCH  AND  SEIZURE  WARRANT 


I 


JTo: - An3cauthorized-law-enfbrcement-of£icer- - . . - 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  Northern  District  of  _ California 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)^ 


See  Attachment  A. 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized): 

See  Attachment  B, 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  August  1,2017  (not  to  exceed  14  days) 

^  in  the  daytime  6:00  a.m.  to  10:00  p.m.  □  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  propeity  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 
as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  .  Hon,  BoryjA,  Howell  .  . 

(United  States  Magistrate  Judge) 

□  Pursuant  to  1 8  U.S.C.  §  3 1 03a(b),  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C* 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
propeily,  will  be  searched  or  seized  (check  the  appropriate  box) 

□  for _ days  f>7o/  to  exceed 30)  □  until,  the  facts  justifying,  the  later  specific  date  of  _ . _ , 

Date  and  time  issued:  f  ^ 

^  Judge 's  signature 

City  and  state:  VVashington,  DO  Hon.  Beryl  A.  Howell,  Chief  U.S.  District  Judge 

^  Printed  name  and  title 
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AO  93  (Rev  1 1/13)  Search  and  Seizure  Warranl  (Page  2) 


Return 


Case  No.: 

i7-r.c^ 


Date  and  tinp  warrant  executed: 

yjih/'zon 


Inventory  made  in  the  presence  of: 


Copy  of  warrant  and  inventory  left  with: 


Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


I  \^c>e>6<^  7^0 1707 \q~  j 

V/CC/--A  Prod^-^^-  F,4r 


FILE© 

JUL  2 1  2017 

ClOTfe,  u.s.  District  and 
Bankruptcy  Courts 


Certifleuttou 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  judge. 


Dale: 


;  /T^ nepo 


l-'runed  mtme  cuKi  fiKe 
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ATTACHMENT  A 


This  warrant  applies  to  information  associated  with  the  Google  Mail  Account 
l@gmail.com  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated  by 
Google,  a  company  headquartered  at  1 600  Amphitheatre  Parkway,  Mountain  View,  CA  94043. 
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ATTACHMENT  B 


L  Information  to  be  disclosed  by  Google 

To  the  extent  that  the  information  described  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  the  Google  (hereinafter  “the  Provider”),  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
account  or  identifier  listed  in  Attachment  A: 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
■session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 


2 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  40  of  80 


during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 

f.  All  search  history  or  web  history; 

g.  All  records  indicating  the  services  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  login  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 

and . . . . . . 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
addresses,  Electronic  Serial  Numbers  (“ESN”),  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

II.  Information  to  be  Seized  by  the  Government 

All  infoimation  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution)  and  18  U.S.C.  §  1956  (money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an 
unregistered  foreign  agent)  and  the  Foreign  Agents  Registration  Act  (“FARA”),  22  U.S.C.  §  61 1 
etseq.,  involving  Michael  Dean  Cohen  and  occurring  on  or  after  January  1,  2016,  including,  for 
each  account  or  identifier  listed  on  Attachment  A,  information  pertaining  to  the  following  matters; 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  EEC; 

b.  Communications,  records,  documents,  and  other  files  involving  Bo  and  Abe  Realty, 
EEC; 

c.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
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account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  | 

purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution;  | 

d.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 

I 

or  on  behalf  of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 

j 

persons,  or  foreign  principals;  j 

e.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  ofi  for  the  benefit  of,  or  at  the  direction 

of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or  j 

I 

foteign priacjpals;. . - . . . . . . 

f.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine  1 

the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  | 

to  the  crimes  under  investigation  and  to  the  account  owner;  | 

g.  Evidence  indicating  the  account  owner’s- state  of  mind  as  it  relates  to  the  crimes  jj 

under  investigation;  | 

h.  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records  j 

that  help  reveal  the  whereabouts  of  such  person(s);  and 

i.  The  identity  of  any  person(s) — including  records  that  help  reveal  the  whereabouts 
of  the  person(s) — ^who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals. 
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Exhibit  B 
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AO  93  (Rev.  11/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  tlie 

District  ofColumbia 

Case:  1:17-mj-OO805 
Assigned  To  :  Chief  Judge  Howell,  Beryl  A. 
Assign.  Date :  11/13/2017 
Description:  Search  and  Seizure  Warrant 

SEARCH  AND  SEIZURE  WARRANT 


In  the  Matter  of  the  Seai^ch  of  ) 

(Briefly  ^escribe  the  property^  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  ) 

INFORMATION  ASSOCIATED  WITH  THE  EMAIL  ) 

ACCOUNT  ^^^^^■iOMAIUCOM  ) 

) 


— — Any-autherized-law-eEforeemeHtoffieer- 


An  application  by  a  federal  law  e'nforcenient  officer  or  ah  attorney  for  the  government  requests  the  search  | 

of  the  following  person  or  property  located  in  the  Northern  District  of  California  I, 

(identify  the  person  or  describe  the  propertyi  to  be  searched  and  give  its  location)  I  .  |i 


See  Attachment  A, 


I  find  that  the  affidavitCs),  or  any  recorded  testimony^  establish  probable  cause  to  s.eai-ch  and  seize  the  person  or  propeify 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe.the property  to  be$eized)\ 


See  Attachment  B. 


YOU  ARE  COMMANDED  to  execute  this  waaant  on  or  before  November  20,  2017  (not  to  exceed  14  days) 
^  ill  the  daytime  6:00  a.m,  to  10:00  p.m.  □  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  waiTant  and  a  receipt  for  the  property  taken  to  the 
person  from  whom;,  or  from  whose  premises,  the  pipperty  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  dr  an  dfllcei’  present  during  the  execution  of  the  warrant,  tnust  prepare  an  inventory 
as  required  by  law  and  promptly  return  this  waitant  and  inventory  to _ _ Hon.  Beryl  A.  Howell _ . 

(United  States  Magistrate  Judge) 


O  Pursuant  to  1 8  U.S.C.  .§  3103a(bT  I  find  that  itnmediate  notification  may  have  an  adverse  result  listed  in  18  U.SU. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

□  for _ ddcys  (not  to  exceed  JO)  □  uiitil,  the  facts  justifying,  the  later  Specific  date  of  _ 


Date  and  time  issued:- 


City  and  state:  Washington,  DC  Hon.  Beryl  A.  Howell,  Chief  U.S.  District  Judge 

Printed  name  and  tUte 
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Ap  93  (Rev.  1 1/1 33  Search  Seizure.  Warrant  (Page  2) 


Return 

Cas.eNp.t 

Date  and  time  warraiit  executed: 

Copy  of  warrant  and  inventoiy  left  with: 

Inventoiy  made  in  the  presence  of : 

Inventory  of  the  property  takM  and  name  of  any  person(s)  seized: 


^ ; Certification 

I  declare  tinder  penalty  qf  perjury  that  this  invehtoi7  is  correct  and  .was  returned  along  with  the  original  warrant  to  the 
designated  judge. 


Date: . .  . . 

ExeGutiiig  officer 's  signature 


Printed  name  and  title 
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ATTACHMENT  A 


This  warrant  applies  to  infonnation  associated  with  the  Google  Mail  Account 
l^gmaiLcom  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated 
by  Google,  a. company  headquartered  at  1 600  Amphitheatre  Parkway,  Mountain  View,  CA  94043. 


1 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  46  of  80 


ATTACHMENT  B 

I.  Information  to  be  disclosed  by  Google 

To  the  extent  that  the  information  described  in  Attachntent  A  is  within  the  possession, 
custody,  Or  control  of  the  Google  (hereinafter  ‘The  Provider”),  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
account  or  identifier  listed  in  Attachment  A: 

aT"  The  contents  of  all“emailsh^ciated  wthThe  account,  including  stored  or  preserved 

copies  of  emails  sent  to  and  from  the  account,  diaft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All.  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  Contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  aiid  durations,  the  date 
on  which  the  account  was  created,  the  length  of  ser  vice,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
during  registration,  all  Other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  Of  connecting; 
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f.  All  search  history  or  web  history; 

g.  All  records  indicaiting  the  seiwices  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a,  login  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 
and 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 

-  addresses— Electronic  ^erial—lNlumbers  -  (—ESN— ), — ^Mobile— Electronic— Identity- 

Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

n.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution),  18  U.S.C.  §  1343  (wire  fraud),  18  U.S.C,  §  1344  (bank  fraud),  and  18  U.S.C.  §  1956 
(money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an  unregistered  foreign  agent)  and  the 
Foreign  Agents  Registration  Act  (“FARA”),  22  U.S.C.  §  611  et  s&q.,  involving  Michael  Dean 
Cohen  and  occurring  on  Or  after  June  1,  2015,  including,  for  each  account  or  identifier  listed  oii 
Attachment  A,  Information  pertaining  to  the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  records,  documents,  and  other  files  that  false  representations  to,  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
account  a  finanoial  institution;  the  source  of  fimds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 
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c. 


d. 


e. 


Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 


foreign  principals; 

Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  deteimine 


-the-geographic^andehronologicaLcontextofaccountaccess,jise, 


and  events  relating 


to  the  crimes  under  investigation  and  to  the  account  owner; 

f.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

g.  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 
that  help  reveal  the  whereabouts  of  such  person(s);  and 

h.  The  identity  of  any  person(s) — ■including  records  that  help  reveal  the  whereabouts 
of  the  personfs) — who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  qf,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals. 

III.  Review  PrbtpcDls 

Review  of  the  items  described  in  Attachment  A  and  Attachment  B  shall  be  conducted 
pursuant  to  established  procedures  designed  to  collect  evidence  in  a  manner  consistent  with 
professional  responsibility  requirements  concerning  the  maintenance  of  attorney-client  and  other 
operative  privileges.  When  appropriate,  the  procedures  shall  include  use  of  a  designated  “filter 
team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address  potential  privileges. 
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Exhibit  C 
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AO  -93  (Rev.  11/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the.  property  to  be.  searched 
or  iderilijy  ihe.person  by  name  and  address) 


JNEORMATION  associated  with  the  account 
^^■I^^^^^Hwhich  is  stored  at  the 

^^^^REMISES  OF  i&1  INTERNET,  iNC. 


) 

) 

) 

) 

) 

) 


Case;  i;17-mj-"00854 

Assigned  To  :  Chief  Judge  Howell,  Beryl  A. 

Assign,  Date :  11/13/2017 

Description:  Search  and  Seizure  Warrant 


SEARCH  AND  SEIZURE  WARRANT 


— Any-authoTized-Iaw-eDfGTGemeBt-Gffiee-r - - - - - — - — 

An  .application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  Northern _ _  District  of  _  California 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  Us  location)\ 


See  Attachment  A. 


r  find  that  the  affidavitts),  or  any  recorded  testimony,  establish  pi^obable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  properly  to  be  seized): 

See  Attachment  B. 


F 


I 


if 

|! 

I 

I 


I 

II 

I 


I 


YOU  ARE  COMMANDED  to  execute  this  waiTant  on  or  before 


November  20,  2017 


^  (not  to  exceed  14  days) 


in  the  daytime  6:00  a, m.  to  10:00  p.m.  D  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt,  for  the  property  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this-  wairant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 
as  required  by  law  and  promptly  return  this  -warrant  and  inventory  to  Hon.  Beryl  A,  Howell  . 


(United  States  ^4agistra^e  Judge) 

□  Pursuant  to  18  U.S.G/§  3i03a(b),l  find  that  immediate  notification  may  have.an  adverse  result  listed  in  18  U,S.C. 

.§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  wan'ant  to  delay  notice  to  the  person  who,  or  whose 
propeity,  will  be  searched  or  seized  (check  the  appropriate  box) 

P  for _ days  (not  to  exceed  30)  □  until,  the  facts  justifying,  the  later  specific  date  of  _ _ 


Date-  and  time  issued:  //  /  /  .j/ 

City  and  state:  Washington,  DC 


Judge  V  sigi'iature 

rign.  Beryl  A.  Howe]l,  Chief  U.S.  District  Judge 


Printed  name  and  tide 
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Rpturji 

Case  No,: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of  : 

Inventory  of  the  property  taken  and  name  of  ariy  person(s)  seized: 

Certification 


1  deplare.  under  penalty  of  pequry  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  judge, 


Date: 


Executing  officer  *s  signahire 


Printed  nctm^  Md  title 
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ATTACHMENT  A 


This  warrant  applies  to  information  associated  with  the  email 


is  stored  at  premises  owned,  maintained,  controlled,  or  operated  by  l&l  Internet,  Inc.  (‘T&l”),  an 
electronic  communication  arid/or  remote  computing  service  provider  headquartered  in  Sunnyvale, 
California. 
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ATTACHMENT  B 

I.  Information  to  be  disclosed  by  l&l 

To  the  extent  that  the  infoiTnation  described  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  the  l&l  (hereinafter  “the  Provider”),  regardless  of  whether  suph  infonhation 
is  stored,  held  or  maintained  inside  or  outside  of  the  United  StateSj  and  including  tiny  emails, 
records,  files,  logs,  or  information  that  have  been  deleted  but  ai’e  still  available  to  the  Provider,  the 
Provider  is  required  to  disclose  the  following  information  to  the  government  for  each  account  or 
identifier  listed  in  Attachment  A; 

~ei~  The  contents  ofail  emaiis-assoeiated  with  tlre'arccoontrimcltrdhigBtored  or  preserved' 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone .  numbers  and  other  identifiers, 
records  obsession  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registmtion,  methods  of  connecting,  log  files,  and  means  arid 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  iricludirig  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  arid  duratioris,  the  date 
ori  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used,  to  register  the  account,  log-iri  IP  addresses  a:ssoeiated  with 
session  times  arid  dates,  account  status,  alternative  e-mail  addresses  provided 
during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 
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fi  All  search  history  or  web  history; 

g.  All  records  indicating  the  seiwices  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  login  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  tiiird-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  witli  the  user; 
and 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 

_ _ ! _ addresses,  Ptect.rnnic  Serial  Numbers  (“ESN’^,  Mobile  Electronic  Identity 

Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MBID”),  Mobile  Identification 
Numbers  ("MIN”),  Subscriber  Identity  Modules  ("SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

II.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fraits, 
and/or  instrumentalities  of  violations  of  18  U.S.G.  §  1014  (false  statements  to  a  financial 
institution),  18  U.S.C.  §  1343  (wim  fraud),  18  U.S.C.  §  1344  (bank  fraud),  and  18  U.S.C.  §  1956 
(money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  ah  unregistered  foreign  agent)  and  the 
Foreign  Agents  Registration  Act  ("FARA”),  22  U.S.C.  §  611  et  seq.,  involving  Michael  Dean 
Cohen,  including,  for  each  account  or  identifier  listed  on  Attachment  A,  inforination  pertaining  to 
the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
fmanoial  institution  with  relation  to  intended  the  purpose  of  an  accotnit  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  aii 
account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 
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c.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

d.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 
foreign  principals; 

e.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 

— - — ^the-gepgraph  ie  and-chronol  ogical-context  of  aceountaGGes&,-usev  and  events-relating 

to  the  crimes  under  investigation  and  to  the  account  owner; 

f.  Evidence  indicating  the  account  owner’s  state  of  inind  as  it  relates  to  the  crimes 
under  investigation; 

g.  ■  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 

that  help  reveal  the  vvhereabouts  of  such  person(s.);  and 

h.  The  identity  of  any  person(s) — including  records  that  help  reveal  the  whereabouts 
of  the  persoh(s)— who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals* 

III.  Review  Protocols 

Review  of  tlie  items  described  in  Attachment  A  and  Attachment  B  shall  be  conducted 
pursuant  to  established  procedures  designed  to  collect  evidence  in  a  manner  consistent  with 
professional  responsibility  requirements  concerning  the  maintenance  of  attorhey'-client  and  other 
operative  privileges.  When  appropriate,  the  procedui'Cs  shall  include  use  of  a  designated  “filter 
team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address  potential  privileges. 
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Exhibit  D 
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AO  93  (Rev,  1 1/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 


In  the  Matter  of  the  Search  of  ) 

(Briejly  describe  (he  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  ) 

INFORMATION  ASSOCIATED  WITH  THE  APPLE  ID  ) 
^^^^^■^GMAIL.COM  THAT  IS  STORED  AT  ) 
PREMISES  CONTROLLED  BY  APPLE,  INC.  ) 


ase:  17-mj-00570 

ssigned  To  ;  Howell,  Beryl  A. 

ssion  Dote  8/7/2017 

escription;  Search  and  Seizure  Warrant 


SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ _  Northern _  District  of  _ 

(identify  the  person  or  describe  the  property  to  he  searched  and  give  its  location}'. 


See  Attachment  A. 


1  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized): 

See  Attachment  B, 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  Aij'gLIgt  21,  2017  (not  to  exceed  14  days) 

^  in  the  daytime  6:00  a.m.  to  10:00  p.m.  O  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  Is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 

as  required  by  law  and  promptly  return  this  warrant  and  Inventory  to _ _ _  Hon.  Beryl  A.  Hovyell . . . . . 

(United  States  Magistrate  Judge) 


.  □  Pursuant  to  18  U.S.C.  §  3103a(b),  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

□  for  ____  days  (not  to  exceed 30)  □  until,  the  facts  justifying,  the  later  specific  date  of  _ _ _ 


City  and  state:  Washington,  DC 


Hon,  Beryl  A.  Howell,  Chief  U.S.  District  Judge 
Printed  name  and  title 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  58  of  80 


AO  93  (Rev.  11/13)  Search  and  Seizure  Wanant  (Page  2) 


Case  No.; 


Return 


Date  and  time  warrant  executed: 


Copy  of  warrant  and  inventory  left  with: 


Inventory  made  in  the  presence  of : 


Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


GeftiUc^tidh 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  Judge. 


Date: 


Executing  officer's  signature 


Printed  name  and  title 
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ATTACHMENT  A 

This  warrant  applies  to  information  ’associated  with  the  Apple  ID 
@gniaii»coni  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated 
by  Apple,  Inc.  (“Apple”),  a  company  headquartered  at  1  Infinite  Loop,  Cupertino,  CA  95014, 
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ATTACHMENT  B 

I.  Information  to  be  disclosed  by  Apple,  Inc. 

To  the  extent  that  the  information  described  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  Apple,  Inc.  (hereinafter  “the  Provider”),  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
account  or  identifier  listed  in  Attachment  A: _ _ _ _ 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
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during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 

f.  All  search  history  or  web  history; 

g.  All  records  indicating  the  services  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  login  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 

~~~  - - __ - .. — - ^ - - — - 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
addresses.  Electronic  Serial  Numbers  (“ESN”),  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEl”). 

IL  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution),  18  U.S.C.  §  1344  (bank  fraud),  18  U.S.C.  §  1956  (money  laundering),  ISU.S.C.  §951 
(acting  as  an  unregistered  foreign  agent),  and  22  U.S.C.  §  6 1 1  ef  seq.  (Foreign  Agents  Registration 
Act),  involving  Michael  Dean  Cohen  and  occurring  on  or  after  January  1, 2016,  including,  for  each 
account  or  identifier  listed  on  Attachment  A,  information  pertaining  to  the  following  matters; 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  EEC; 

b.  Communications,  records,  documents,  and  other  files  involving  Bo  and  Abe  Realty, 
EEC; 

c.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
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account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  | 

purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 

d.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by,  | 

or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  | 

persons,  or  foreign  principals;  | 

e.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of;  for  the  benefit  of  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 

— —foreign-principals; - - - — ^ - - - — — - _ __ 

f.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 
the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating 
to  the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

h.  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 
that  help  reveal  the  whereabouts  of  such  person(s);  and 

i.  The  identity  of  any  person(s)— including  records  that  help  reveal  the  whereabouts 
of  the  person(s)- — who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals. 
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Exhibit  E 
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UNITED  STATES  DISTRICT  COURT 
SOUTHDBRN  DISTRICT  OF  NEW  YORK 


la  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 
l@gmail.com,  . 
I@gmail.com,  and 

I  Maintained  at 
Premises  Controlled  by  Google,  hac., 
USAO  Reference  No.  2018R00127 


Search  Warrant  and  Non-Disclosure  Order 

TO:  Google,  Inc.  (“Provider”) 


United  States  Attorney’s  Office  for  the  Southern  Dishict  of  New  York  and  the  Federal 
Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the' provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  accounts  ^^^^^^^@gmail.com,  ^^^|@gmail.com,  and 

maintained  at  premises  controlled  by  Google,  Inc.,  contain  evidence, 
fruits,  and  instrumentaUties  of  crime,  all  as  specified  in  Attacliments  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies,  within  7  days  of  the  date 
of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  11  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in  Sections  III  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  serve  a  copy  of  this  Warrant  and  Order 
on  the  Provider  within  7  days  of  the  date  of  issuance.  The  Wanant  and  Order  may  be  served  via 


1.  Warrant.  Upon  an  affidavit  of  Special  Agent 
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electronic  transmission  or  any  other  means  through,  which  the  Provider  is  capable  of  accepting 
service. 

2.  Non-Disclosnre  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 

'existenceuDf  this^Warrantrand^ Order  to  the  listed  subscriber  or  to-any  other  persOmfor  a  period-of- 

180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice , 


3.  Sealing.  It  is  further  ordered  that  tlris  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  seiwe  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 


obligations  in  any  prosecutions  related  to  this  matter. 


Dated:  New  York,  New  York 


Date  Issued 


Thnelss”"'^ 


Southern  District 


02.282018 
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Email  Search  Attachment  A 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitlreatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
l^gmail.comi  (the  “Subject  Account”)  for  the  time  period  referenced  below. 
-ArlaW-enforcemenfoffieer-will-serve-this-warranfby-tr-ansmitting-it-via  email  or-another- 


appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
ofiScer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  IE  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  horn,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  14, 2017  and  the  date  of  this  warrant, 
inclusive. 


b.  Address  book  information.  All  address  book,  contact  list,  or  similar  ioformation 
associated  with  the  Subject  Account 

c.  ,  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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niimber,  alternate  email  addresses,  registeation  ff  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1, 2014  and  the  date  of  this  warrant,  inclusive. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 

~TOtlrilre~Suhject”Acconntrincluding‘complaints7inq[uiries7nr  other  eontactswithsupport-serviees- 

and  records  of  actions  taken,  limited  to  items  sent,  received,  or  created  between  December  1, 2014 
and  the  date  of  this  warrant,  inclusive. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Account,  limited  to  items  sent,  received,  or  created  between  December  1, 2014  and  the  date  of  this 
warrant,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Account,  limited  to  items  sent,  received,  or  created 
between  December  1 , 20 1 4  and  the  date  of  this  warrant,  inclusive. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pmsuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

ni.  Review  oflnformation  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  ofihcers  and 
agents,  .attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
andinstrumentahties  of  violations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 


022saoi& 
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the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

cr^Catnmunicationsrrecordsrdocumentsyand  other  filesdnvolving-a"planrproposahror 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to^^^^^^^^^^^and/or 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
T.T.C  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  —  includmg  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  LLC, 
or  about  any  plaii  or  proposal  or. agreement  for  Michael  D.  Cohen  and/or  entities  associated  with 
him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others, 
including  to  ^^^^^^^^md/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getael  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purp  ose  of  an  account  or  loan  at  that  financial 
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institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

Evidence  indicaShglhASubj^tTAccount  owner’sTntentwttrelatesAo'fhe^Subject 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
estabhshed  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attomey-cUent  or  other  apphcable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  firom  the  investigative  team,  in  order  to  address 
potential  privileges. 


02.28.2018 
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Email  Search  Attachment  B 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email 
accounts  ^^^^gmaihcom  and  (the  “Subject  Accounts”)  for  the  time 

period-between-October-l,-2016-and-the-date-of-thisxvarrant, -inclusive. - — — 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  E  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  IE  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’ s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Accounts: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  Avith  the  Subject  Accounts,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Accounts. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  P  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  somce  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associatedwith  the  Subject  Accounts, 
including  any  P  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subj ect  Accounts,  including  complaints,  inquiries,  or  other  contacts  with  support  services 

“aiKiTecDrds  of  actions  takeuT^ - - — — - — ^ - - 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Accounts. 

g.  Associated  content.  AU  Google  Docs,  files  mamtained  on  Google  Drive,  'and  instant 
messages  or  Gchats  associatedwith  the  Subject  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(10  or  otherwise. 

m.  Review  oflnformation  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical,  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  ffuits, 
and  instrumentahties  of  violations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(whe  fraud),  and  1344  (banlc  fraud),  including  the  followmg: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Accounts; 

2 
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b.  Cnnrmnimicatinns,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 

agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabihties,  to  and/or  entities  associated 

with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated-withrthe  Subject-Accouhts-about-any  matters-relating-to  any-plan  or  proposal-or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medalHons,  and  any  associated  debts  or  liabilities,  to  ^^^^^^^^^|a.nd/or  entities  associated 
with  him; 

d.  Communications  between  the  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Mehose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  puipose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Subject  Accounts  was  accessed  or  used,  to 

determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  .  . 

g.  Evidence  indicating  the  Subject  Accounts  owners’  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 


I 

I 

I 


If 
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Exhibit  F 
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UNTIED  STATES  DISTKICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
_Asso^ted  with  the  Email  Account 
maintained 

Premises  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
2018R00127 


- - SESRCH^WATHUa^TYiM)1N^DN-DlSCLOStIHE^^  - 

TO:  1  &  1  Intemet,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 
Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 


1.  Warrant.  Upon  an  affidavit  of  Special  Agent  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pui'suant  to  the  provisions  of  the 


Stored  Communications  Act,  18  U.S.C.  §.  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  accounl^^^^Q^^^^^^^naintained  at  premises  controlled  by  1 
&  1  Intemet,  Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  cfune,  all  as  specified  in 
Attachment  D  hereto.  Accordiugly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative 


Agencies,  within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in 
Section  n  of  Attachment  D  hereto,  for  subsequent  review  by  law  enforcement  personnel  as 
authorized  in  Sections  III  and  TV  of  Attachment  D.  The  Government  is  requked  to  serve  a  copy 
of  this  Warrant  and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant 
and  Order  may  he  served  via  electronic  transmission  or  any  other  means  through  which  the 
Provider  is  capable  of  accepting  service. 
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2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  lands  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 


tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  wUl  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 


existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  tihe  Court  if 
necessarj^excepIrthat  ProviderTnay  disclose  this-Warranhand-Order-to-an  attomey-for-Provider- 
for  the  purpose  of  receiving  legal  advice, 

3.  Sealing.  It  is  flirther  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


.«/ 


Date  Issued 


Time  Isi 
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Email  Search  Attachment  D 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  1  &  1  Intemet,  Inc.  (the  “Provider”),  headquartered  at  701  Lee 
Road,  Suite  300,  Chesterbrook,  Pennsylvania  19087,  and  applies  to  all  content  and  other 
infomnation  within  the  Provider’spossession,  custody,  or  control  associated  with  the  email  account 
(the  “Subject  Account”)  for  the  time  period  between  November  14,  2017 

-and  the  date  oLthis-warrant^inclusive, - — — - - — — — - 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  maimer  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  hook  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  ‘and  payment  information 
regarding  the  Subject  Account,  including  but  not  Ihnited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  P  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  P  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 

^and  recordsTofactionstakem  ’ 

f.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  1 8 
U.S.C.  §  2703®  or  otherwise. 

in.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentahties  of  violations  of  1 8  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  deftaud 
the  United  States),  1005  (false  bank  entdes);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  firaud),  and  1344  (bank  ffaud),  including  the  following: 

a.  Communications,  records,  documents,  and  offer  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  ffe  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions ; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
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medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to 


rnd/or 


entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
T.T.C  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 


e.  The  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the 


■person(s)"^whomoinmunicated'withThe-SubjectA;ccounf  about  anyTnattersuelatmg  to  EssentiaT 
Consultants,  LLC,  or  about  anyplan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 


associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


and/or  entities  associated  with  him; 


liabilities,  to  others,  including  to 


f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with-  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  accoxmt  at  a  financial  institution; 
the  source  of  fluids  flowing  iPto  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 


02.28.2018 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 


02.285018 
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MAG 

UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  re:  Warrant  and  Order  For  Prospective 
and  Historical  Location  Information  and 
Pen  Register  Information  for  the 
Cellphones  Assigned  Call  Numbers 

USAO  Reference  No.  2018R00127 


WARRANT  AND  ORDER 


18  Mag. 


Warrant  and  Order 

for  Cellphone  Location  Information  and  Pen  Register  Information 
and  for  Sealing  and  Non-Disclosure 

TO:  AT&T  (“Service  Provider”),  and  any  subsequent  provider  of  service  to  the  Target 

Cellphones  specified  below  (“Subsequent  Service  Provider”) 

United  States  Attorney’s  Office  and  Federal  Bureau  of  Investigation  (“Investigative 
Agencies”) 

Upon  the  Application  and  Agent  Affidavit  submitted  by  the  Government  in  this  matter: 

L  Findings 

The  Court  hereby  finds: 

1 .  The  Target  Cellphones  (the  “Target  Cellphones”)  that  are  the  subject  of  this  Order  are 

assigned  call  numhers  and^^^|^^H,  are  subscribed  to  in  the  name  of  Michael 

Cohen  (the  “Suhscriher”)  and  are  currently  serviced  by  the  Service  Provider. 

2.  Pursuant  to  18  U.S.C.  §  2703(c)(1)(A)  and  the  applicable  provisions  of  Rule  41  of  the 
Federal  Rules  of  Criminal  Procedure,  the  Government’s  application  sets  forth  prohahle  cause  to 
believe  that  the  prospective  and  historical  location  information  for  the  Target  Cellphone  will  reveal 
evidence,  fruits,  or  instrumentalities  of  suspected  violations  of  52  U.S.C.  §§  30116(a)(1)(A)  and 
30109(d)(l)(A)(l)  (“the  Subject  Offense”). 

3.  Pursuant  to  18  U.S.C.  §  2703(d),  the  Government’s  application  also  sets  forth  specific 
and  articulable  facts  showing  that  there  are  reasonable  grounds  to  believe  that  the  historical 
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location  information  and  toll  records  for  the  Target  Cellphone  are  relevant  and  material  to  an 
ongoing  criminal  investigation. 

4.  Pursuant  to  18  U.S.C.  §  3123(b)(1),  the  Government  has  certified  that  the  pen  register 
information  for  the  Target  Cellphones  is  relevant  to  an  ongoing  investigation  by  the  Investigating 
Agencies  of  Michael  Cohen  and  others  unknown  in  connection  with  suspected  violations  of  the 
Subject  Offense. 

5.  Pursuant  to  18  U.S.C.  §  2705(b),  there  is  reason  to  believe  that  notification  of  the 
existence  of  this  Warrant  and  Order  will  result  in  destruction  of  or  tampering  with  evidence,  danger 
to  the  physical  safety  of  an  individual,  flight  from  prosecution,  and/or  intimidation  of  potential 
witnesses,  or  otherwise  will  seriously  jeopardize  an  ongoing  investigation. 

NOW,  THEREFORE,  pursuant  to  Fed.  R.  Grim.  P.41, 18U.S.C.  §§  3121  etseq.,  18U.S.C. 
§§  2701  etseq.,  and  18  U.S.C.  §  3103a,  IT  IS  HEREBY  ORDERED: 
n.  Order  to  Service  Provider 

6.  Service  Provider.  This  Order  shall  apply  to  the  Service  Provider  specified  above,  and 
to  any  subsequent  provider  of  service  to  the  Target  Cellphones  without  need  for  further  Order  of 
this  Court. 

7.  Prospective  Location  Information.  The  Service  Provider  shall  provide  to  the 
Investigating  Agencies  on  a  prospective  basis,  for  a  period  of  45  days  from  the  date  of  this  Order 
(or  the  date  that  the  Target  Cellphones  are  seized,  whichever  comes  first),  information  concerning 
the  location  of  the  Target  Cellphones  (“Prospective  Location  Information”),  including  all 
available: 

a.  precision  location  information,  including  GPS  data,  E-911  Phase  II  data,  and 
latitude-longitude  data;  and 
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b.  cell  site  data,  including  any  data  reflecting  (a)  the  cell  towers  and  sectors  thereof 
utilized  in  routing  any  phone,  text,  or  data  communication  to  or  from  the  Target  Cellphones,  and 
(b)  the  approximate  range  of  the  target  phone  from  the  cell  towers  during  the  communication 
(including  per-call  measurement  (“PCM”)  or  round-trip  time  (“RTT”  or  “NELOS”)  data); 

8.  Historical  Location  Information  and  Toll  Records.  The  Service  Provider  shall 
provide  to  the  Investigating  Agency  all  available  historical  cell  site  location  information  reflecting 
the  cell  towers  and  sectors  thereof  utilized  in  routing  any  phone,  text,  or  data  communication  to  or 
from  the  Target  Cellphones,  and  the  approximate  range  of  the  target  phone  from  the  cell  towers 
during  the  communication  (PCM/RTT  or  NELOS  data),  for  the  period  from  October  1,  2016 
thrott^Mhc  date  of  tfais'Order,  as  well  as  all  available  toll  records  (including  call  detail,  SMS  detail, 

or  data  session  detail  records)  for  the  communications.  ^ 

9.  Pen  register  with  caller  identification  and/or  trap  and  trace  device.  The  Service 

Provider  shall  provide  to  the  Investigating  Agencies,  for  a  period  of  60  days  from  the  date  of  this 
order  (or  the  date  that  the  Target  Cellphones  are  seized,  whichever  comes  first),  all  dialing,  routing, 
addressing,  or  signaling  information  associated  with  each  voice,  text,  or  data  communication 
transmitted  to  or  from  the  Target  Cellphones,  including  but  not  limited  to:  ^  - 

a.  any  unique  identifiers  associated  with  the  phone,  including  ESN,  MEIN, 

MSISDN,  IMSI,  IMEI,  SIM,  MIN,  or  MAC  address; 

b.  source  and  destination  telephone  numbers  and/or  Internet  protocol  (“IP”) 

addresses;^ 


^  The  Service  Provider  is  not  required  to  provide  post-cut-through  dialed  digits  (“PCTDD”),  or 
digits  that  are  dialed  after  a  telephone  call  from  the  Target  Phone  has  been  connected.  If  possible, 
the  Service  Provider  will  forward  only  pre-cut-through-dialed  digits  to  the  Investigative  Agency. 
However,  if  the  Service  Provider’s  technical  capabilities  require  it  to  forward  all  dialed  digits, 
including  PCTDD,  to  the  Investigative  Agency,  the  Investigative  Agency  will  only  decode  and 
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c.  date,  time,  and  duration  of  the  communication;  and 

d.  cell-site  information  as  specified  above. 

10.  Technical  Assistance.  The  Service  Provider  shall  furnish  the  Investigating  Agency  all 
information,  facilities,  and  technical  assistance  necessary  to  accomplish  the  disclosure  of  all  of  the 
foregoing  information  relating  to  the  Target  Cellphones  unobtrusively  and  with  the  minimum 
interference  to  the  service  presently  provided  to  the  Subscriber. 

1 1 .  Non-Disclosure  to  Subscriber.  The  Service  Provider,  including  its  affiliates,  officers, 
employees,  and  agents,  shall  not  disclose  the  existence  of  this  Warrant  and  Order,  or  the  underlying 
investigation,  to  the  Subscriber  or  any  other  person,  for  a  period  of  180  days  from  the  date  of  this 
Warrant  and  Order,  subject  to  extension  upon  application  to  the  Coxirt,  if  necessary. 

III.  Additional  Provisions 

12.  Compensation  for  Costs.  The  Investigating  Agency  shall  compensate  the  Service 
Provider  for  reasonable  expenses  incurred  in  complying  with  the  Warrant  and  this  Order. 

13.  Sealing.  This  Warrant  and  Order,  and  the  supporting  Application  and  Agent  Affidavit, 
shall  be  sealed  until  otherwise  ordered  by  the  Court,  except  that  the  Government  may  without 
further  order  of  this  Court:  serve  this  Warrant  and  Order  on  the  Service  Provider;  provide  copies 
of  the  Warrant  and  Order  or  the  supporting  Application  and  Agent  Affidavit  as  need  be  to 


forward  to  the  agents  assigned  to  the  investigation,  the  numbers  that  are  dialed  before  the  call  is 
cut  through. 
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personnel  assisting  the  Government  in  the  investigation  and  prosecution  of  this  matter;  and 
disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


( :  rs  f 


Date  Issued 


Time  Issued 


Tfl  JUDGE: 

Southern  District  of  New  York 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  re:  Warrant  and  Order  For 
Prospective  and  Historical  Location 
Information  and  Pen  Register 
Information  for  the  ^Cellphones 
Assigned  Call  Numbers 
and  US  AO  Reference 

No.  2018R00127 


I 

APPLICATION 
18  Mag. _ 


Application  for  Warrant  and  Order 
for  Cellphone  Location  and  Pen  Register  Information 

The  United  States  of  America,  by  its  attorney,  Robert  Khuzami,  Attorney  for  the  United 
States  Acting  Under  Authority  Conferred  by  28  U.S.C.  §  5 15,  Assistant  United 

States  Attorney,  of  counsel,  respectfully  requests  that  the  Court  issue  the  accompanying  proposed 
Warrants  and  Orders  for  prospective  and  historical  location  information  and  pen  register 
information  for  two  cellphones  (the  “Target  Cellphones”).  As  grounds  for  this  Application  the 
Government  relies  on  the  following  facts  and  authorities. 

I.  Introduction 

1 .  I  am  an  Assistant  United  States  Attorney  in  the  U.  S .  Attorney’ s  Office  for  the  Southern 
District  of  New  York.  This  Application  is  submitted  in  conjunction  with  the  accompanying 
affidavit  of  a  law  enforcement  agent  (“Agent  Affidavif’),  to  be  sworn  before  this  Court,  and 
incorporated  by  reference  herein.  I  make  this  Application  based  on  information  and  belief, 
including  the  Agent  Affidavit,  my  review  of  other  documents  in  the  case,  and  information  received 
from  investigative  personnel. 
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2.  The  Investigating  Agency,  Target  Cellphones,  Subscriber,  Target  Subject(s),  Service 
Provider,  Subject  Offenses,  Successor  Service  Provider,  and  Successor  Cellphones  referenced  in 
this  Application  are  as  specified  in  the  Agent  Affidavit. 

IL  Legal  Authority 

A,  Prospective  Location  Information 

3.  The  Government  seeks  to  obtain  both  precision  location  information  and  cell  site  data 
for  the  Target  Cellphones  on  a  prospective  basis  (the  “Prospective  Location  Information”)  for  a 


period  of  45  days  from  the  date  of  this  order  -  the  same  period  of  time  for  which  a  warrant  for  a 
tracking  device  may  be  granted  imder  Rule  41(e)(2)(C).  It  bears  noting,  however,  that  while  the 
Prospective  Location  Information  may  permit  “tracking”  the  user  of  the  phone  in  the  colloquial 
sense,  this  is  not  an  application  for  a  warrant  for  a  “tracking  device”  as  defined  in  Fed.  R.  Ciim. 
P.  41(a)(2)(E)  and  18U.S.C.  §  3117(b).  Those  provisions  only  apply  where  an  agent  is  seeking  to 
physically  install  a  tracking  device  on  a  given  object.  Instead,  the  Prospective  Location 
Information  will  be  obtained  by  requiring  the  Service  Provider  to  provide  the  information. 

4.  The  authority  for  this  application  is  found  in  18  U.S.C.  §§  2703(c)(1),  which  authorizes 
a  court  of  competent  jurisdiction  to  require  any  electronic  communication  service  provider  (which 
includes  a  cellular  telephone  service  provider^)  to  disclose  any  “record  or  other  information 
pertaining  to  a  subscriber”  other  than  the  “contents  of  communications,”  when  the  government 
obtains,  inter  alia,  a  warrant  under  the  procedures  of  Rule  41.  See  18  U.S.C.  §  2703(c)(l)(A).^ 


^  See  18  U.S.C.  §  2711(1)  (incorporating  by  cross-reference  statutory  definitions  set  forth  in  18 
U.S.C.  §  2510);  18  U.S.C.  §  2510(15)  (defining  “electronic  communication  service”  as  “any 
service  which  provides  to  users  thereof  the  ability  to  send  or  receive  wire  or  electronic 
communications”) . 

^  Another  provision  of  18  U.S.C.  §  2703(c)(1),  specifically,  §  2703(c)(1)(B),  enables  the 
Government  to  compel  an  electronic  communication  service  provider  to  disclose  non-content 
information  pertaining  to  a  subscriber  by  obtaining  an  order  issued  xmder  18  U.S.C.  §  2703(d), 
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Because  data  concerning  a  subscriber’s  location,  such  as  precision  location  information  and  cell 
site  data,  constitutes  “mformation  pertaining  to  a  subscriber”  that  does  not  include  the  “contents 
of  conummications,”  that  data  is  among  the  types  of  information  available  under  §  2703(c)(l)(A).^ 
Further,  as  specified  m  18  U.S.C.  §  271 1(3),  this  Court  is  a  court  of  competent  jurisdiction  under 
the  Stored  Communications  Act  because  it  has  jurisdiction  over  the  Subject  Offenses. 

5.  The  Government’s  request  for  cell  site  data  also  implicates  the  pen  register  statute, 
because  such  data  constitutes  signaling  information  used  by  the  Service  Provider  to  route 
communications  to  and  from  the  Target  Cellphones.  In  order  to  collect  such  data,  a  valid  pen 
register  order  is  required."*  Accordingly,  I  hereby  certify  pursuant  to  18  U.S.C.  §  3122  that  such 


instead  of  a  warrant.  Rather  than  requiring  a  showing  of  probable  cause,  a  §  2703(d)  order  requires 
only  a  showing  that  there  are  reasonable  grounds  to  believe  that  the  information  sought  is  relevant 
and  material  to  an  ongoing  criminal  investigation.  However,  given  that  continued  monitoring  of 
an  individual’s  specific  location  through  precision  location  information  arguably  implicates  Fourth 
Amendment  interests,  see  United  States  v.  Jones,  565  U.S.  400,  418  (2012)  (Alito,  J.,  concurring 
m  the  judgment),  the  Government  here  seeks  to  obtain  the  Precision  Location  Information  sought 
herein  by  a  §  2703(c)  warrant  rather  than  a  §  2703(d)  order. 

^  See  In  re  Application,  460  F.  Supp.  2d  448,  459-60  &  n.  55  (S.D.N.Y.  2006)  (Kaplan,  J.) 
(cellphone  location  information  falls  within  §  2703(c)(1));  accord,  e.g..  United  States  v.  Caraballo, 
963  F.  Supp.  2d  341,  361  (D.Vt.  2013);  In  re  Order,  632  F.  Supp.  2d  202,  207  (E.D.N.Y.  2008); 
In  re  Application,  405  F.  Supp.  2d  435,  444-45  (S.D.N.Y.  2005).  But  see  In  re  Application,  849 
F.  Supp.  2d  526, 574  (D.Md.  201 1)  (rejecting  view  that  cellular  location  data  falls  within  the  scope 
of  the  SCA  and  finding  that  phone  must  be  treated  as  “tracking  device”  for  purposes  of  Rule  41 
where  used  to  collect  location  data);  In  re  Application,  2009  WL  159187,  at  *5-*6  (S.D.N.Y. 
Jan.  13, 2009)  (McMahon,  J.)  (same). 

"*  See  18  U.S.C.  §  3121  (prohibiting  use  of  pen  register  or  trap  and  trace  device  without  an  order 
imder  the  pen  register  statute);  3127(3)  &  (4)  (defining  pen  register  and  trap  and  trace  device  to 
include  devices  or  processes  that  record,  inter  alia,  signaling  information).  Although  cell  site  data 
constitutes  “signaling”  information  within  the  meaning  of  the  pen  register  statute,  a  separate  statute 
precludes  the  Government  from  relying  “solely”  on  the  authority  provided  by  the  pen  register 
statute  to  ascertain  a  subscriber’s  location.  47  U.S.C.  §  1002(a).  Here,  the  Government  seeks  to 
obtain  sUch  data  pursuant  to  18  U.S.C.  §  2703(c)  as  well  as  the  pen  register  statute,  rather  than 
“solely”  under  the  latter  statute.  See  In  re  Application,  460  F.  Supp.  2d  at  456-59. 
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signaling  information  is  relevant  to  an  ongoing  investigation  being  conducted  by  the  Investigating 
Agency  into  suspected  violations  of  the  Subject  Offenses  by  the  Target  Subject(s). 

B.  Historical  Location  Information 

6.  The  Government  also  seeks  historical  cell  site  data  for  the  Target  Cellphones  for  the  ^ 

I  1 1.01^  "Vr?  f  r'4/^'V 

period  from  October  1, 2016  to  the  prosoat  (the  “Historical  Location  Information”).  Because  such 
data  constitutes  non-content  information  concerning  a  subscriber,  the  Court  is  authorized  to  order 
the  Service  Provider  to  provide  this  data  pursuant  to  a  warrant  application  under  18  U.S.C.  § 


2703(c)  or  an  application  for  an  order  under  18  U.S.C.  §  2703(d).  See  18  U.S.C.  §  2703(c)(1)(B). 
Pursuant  to  18  U.S.C.  §  2703(d),  I  respectfully  submit  that  the  Agent  Affidavit  offers  specific  and 
articulable  facts  showing  that  there  are  reasonable  grounds  to  believe  that  the  Historical  Location 
Information  is  relevant  and  material  to  an  ongoing  criminal  investigation.  Further,  although  a 
warrant  for  the  Historical  Location  Information  is  not  required,  I  respectfully  submit  that  the  same 
probable  cause  supporting  the  Government’s  request  for  a  warrant  to  obtain  the  Prospective 
Location  Information  requested  above  also  supports  the  issuance  of  a  warrant  under  §  2703(c)  for 
the  Historical  Location  Information.^  In  addition,  the  Government  seeks  toll  records  for  the  same 


^  A  warrant  is  not  required  to  obtain  historical  cell  site  information.  Individuals  do  not  have  a 
reasonable  expectation  of  privacy  in  historical  cell  site  information  because  individuals  voluntarily 
convey  that  information  to  third-party  service  providers.  See  United  States  v.  Graham,  824  F.3d 
421,  424-25  (4th  Cir.  2016)  {eti  bane);  United  States  v.  Davis,  785  F.3d  498,  511-13  (11th  Cir. 
2015)  (en  banc),  cert,  denied,  136  S.  Ct.  479  (2015);  In  re  Application  of  US.  for  Historical  Cell 
Site  Data,  724  F.3d  600,  614-15  (5th  Cir.  2013);  United  States  v.  Guerrero,  768  F.3d  351,  358-59 
(5th  Cir.  2014);  see  also  United  States  v.  Pascual,  502  F.  App’x  75,  80  &  n.6  (2d  Cir.  2012),  cert, 
denied,  134  S.  Ct.  231  (2013)  (“general  principles”  of  third-party  doctrine  “point[  ]”  toward  this 
conclusion  regarding  cell-site  records);  but  see  United  States  v.  Ulbricht,  858  F.3d  71,  97  n.29  (2d 
Cir.  2017)  (declining  to  express  its  view  as  to  whether  the  Fourth  Amendment  appHes  to  historical 
cell  site  location  information).  Moreover,  because  historical  cell  site  information  does  not  enable 
law  enforcement  to  conduct  live  monitoring  of  a  person’s  location  within  private  spaces  such  as 
“the  interior  of  the  [person’s]  home,”  it  is  not  comparable  to  prospective  precision  location 
information,  for  which  a  warrant  is  arguably  required.  See  In  re  Application  of  US.  for  Order 
Directing  Provider  of  Elec.  Commc’n  Serv.  to  Disclose  Records  to  Gov’t,  620  F.3d  304,  312-15 
(3d  Cir.  2010).  Nevertheless,  because  the  Supreme  Court  has  recently  granted  certiorari  to  review 
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period  as  the  Historical  Location  Information  is  requested,  which  the  Government  is  also 
authorized  to  obtain  pursuant  to  18  U.S.C.  §2703(d). 

C.  Pen  Register  Information 

7.  Finally,  the  Government  seeks  an  order  pursuant  to  18  U.S.C.  §§  3121-26  authorizing 
the  use  of  a  pen  register  on  the  Target  Cellphones  for  a  period  of  60  days  from  the  date  of  this 
order  (or  the  date  that  the  Target  Cellphones  are  seized,  whichever  comes  first).  Specifically,  the 
Government  seeks  an  order  directing  the  Service  Provider  to  furnish  any  information,  facilities. 


and  technical  assistance  necessary  to  operate,  imobtrusively  and  with  minimum  disruption  of 

service,  a  pen  register  and  trap  and  trace  device  to  capture  all  dialing,  routing,  addressing,  or  " 

signaling  information  associated  with  each  call  transmitted  to  or  from  the  Target  Cellphones,  as 

specified  further  in  the  proposed  Warrant  and  Order  (the  “Pen  Register  Information”).^ 

8.  I  hereby  certify  pursuant  to  18  U.S.C.  §  3122  that  the  Pen  Register  Information  is  | 

relevant  to  an  ongoing  investigation  being  conducted  by  the  Investigating  Agency  into  suspected 
violations  of  the  Subject  Offenses  by  the  Target  Subject(s). 

|| 

il 

j| 


the  Sixth  Circuit’s  decision  in  United  States  v.  Carpenter,  819  F.3d  880,  887-90  (6th  Cir.  2016) 
(holdmg  Government’s  collection  of  business  records  containing  historical  cell  site  data  did  not 
constitute  search  under  Fourth  Amendment),  cert,  granted,  137  S.  Ct.  2211  (June  5,  2017)  (No. 
16-402),  the  Government,  in  an  abundance  of  caution,  requests  a  warrant  under  18  U.S.C.  § 
2703 (cX  upon  articulation  of  probable  cause  as  set  forth  in  the  Agent  Affidavit. 

^  The  Government  is  also  not  seeking  authorization  to  obtain  post-cut-through  dialed  digits 
(“PCTDD”),  or  digits  that  are  dialed  after  a  telephone  call  from  the  Target  Phone  has  been 
connected.  Pursuant  to  the  attached  Order,  if  possible,  the  Provider  will  forward  only  pre-cut- 
through-dialed  digits  to  the  Investigating  Agency.  However,  if  the  Provider’s  technical 
capabilities  require  it  to  forward  all  dialed  digits,  including  PCTDD,  to  the  frivestigating  Agency, 
the  Investigating  Agency  will  only  decode  and  forward  to  the  agents  assigned  to  the  investigation 
the  numbers  that  are  dialed  before  the  call  is  cut  through. 
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D.  Sealing  and  Non-Disclosure  Order  to  Service  Provider 

9.  When  the  Government  obtains  records  or  information  under  §  2703(c),  it  is  not  required 
to  notify  the  subscriber  or  customer.  18  U.S.C.  §  2703(c)(3).  Additionally,  the  Government  may 
obtain  an  order  precluding  the  Provider  from  notifying  the  subscriber  or  any  other  third-party  of 
the  warrant  or  order  obtained,  for  such  period  as  the  Court  deems  appropriate,  where  there  is  reason 
to  believe  that  such  notification  will  result  in  endangering  the  life  or  physical  safety  of  an 
individual,  flight  fi’om  prosecution,  destruction  of  or  tampering  with  evidence,  or  intimidation  of 
potential  witnesses,  or  will  otherwise  seriously  jeopardize  the  investigation.  18  U.S.C.  §  2705(b). 

10.  Further,  18  U.S.C.  §  3123(d)  provides  that  an  order  directing  installation  of  a  pen 
register  or  trap  and  trace  device  shall  direct  the  pertinent  service  provider  “not  to  disclose  the 
existence  of  the  pen  register  or  trap  and  trace  device  or  the  existence  of  the  investigation  to  the 
listed  subscriber,  or  to  any  other  person  unless  or  until  otherwise  ordered  by  the  Court.” 

11.  Accordingly,  as  explained  farther  in  the  Agent  Affidavit,  in  light  of  the  confidential 
nature  of  the  continuing  criminal  investigation  and  the  adverse  consequences  expected  in  the  event 
of  premature  notification,  the  Government  respectfully  requests  that  the  Court  direct  the  Service 
Provider  not  to  notify  the  Subscriber  or  any  other  person  of  the  Warrant  and  Order  sought  herein 
for  a  period  of  180  days,  subject  to  extension  upon  application  to  the  Court,  if  necessary. 

12.  For  similar  reasons,  I  respectfully  request  that  the  proposed  Warrant  and  Order,  this 

Application,  and  the  accompanying  Agent  Affidavit,  be  maintained  under  seal  until  the  Court 

orders  otherwise,  except  that  the  Government  be  permitted  without  further  order  of  this  Court  to 

serve  this  Warrant  and  Order  on  the  Service  Provider;  provide  copies  of  the  Warrant  and  Order  or 

the  supporting  Application  and  Agent  Affidavit  as  need  be  to  personnel  assisting  the  Government 

in  the  investigation  and  prosecution  of  this  matter;  and  disclose  these  materials  as  necessary  to 

comply  with  discovery  and  disclosure  obligations  in  any  prosecutions  related  to  this  matter. 
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III.  Prior  Requests 

14.  Except  as  may  be  set  forth  above,  no  prior  request  for  the  relief  requested  herein  has 


been  made. 

Dated:  New  York,  New  York 
April  7,  2018 


Assistant  UnitedStatesAttomey 
Tel:  (212)  637-:^^H 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  re:  Warrant  and  Order  For  Prospective 
and  Historical  Location  Information  and 
Pen  Register  Information  for  the 
Cellnhone^Assigned  Cal^Numbem 

USAO  Reference  No.  201 8R001 27 


AGENT  AFFIDAVIT 


18  Mag. 


Agent  Affidavit  in  Support  of  Warrant  and  Order 
for  Cellphone  Location  and  Pen  Register  Information 


STATE  OF  NEW  YORK 
COUNTY  OF  NEW  YORK 


)  ss. 
) 


Special  Agent^^^H^^^I  of  the  United  States  Attorney’s  Office  for  the  Southern 
District  of  New  York,  being  duly  sworn,  deposes  and  states: 


I.  Introduction  j 

1 .  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern  District 

I 

of  New  York  (“Investigating  Agency”).  As  such,  I  am  a  “federal  law  enforcement  officer”  within  ^ 

I 

P 

the  meaning  of  Federal  Rule  of  Criminal  Procedure  41(a)(2)(C),  that  is,  a  government  agent  j 

engaged  in  enforcing  the  criminal  laws  and  duly  authorized  by  the  Attorney  General  to  request  a  i 


search  warrant.  I  have  been  a  Special  Agent  with  the  USAO  since  August  2016.  I  previously 
served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector  General  from 
May  201 1  to  August  2016.  In  the  course  of  my  experience  and  training  in  these  positions,  I  have 
participated  in  numerous  investigations  involving  the  use  of  cellphone  location  data. 

2.  Requested  Information.  I  respectfully  submit  this  Affidavit  pursuant  to  18  U.S.C. 


§§  2703(c)  and  (c)(1)(A)  and  the  applicable  procedures  of  Federal  Rule  of  Criminal  Procedure  41 ; 
18  U.S.C.  §§  2703(d)  &  2705;  and  18  U.S.C.  §§  3121-3126,  in  support  of  a  warrant  and  order  for 
prospective  location  information,  historical  location  information,  toll  records,  and  pen  register 
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information,  for  the  Target  Cellphones  identified  below  (collectively,  the  “Requested 
Information”). 

3.  Basis  for  Knowledge.  This  Affidavit  is  based  upon  my  participation  in  the 
investigation,  my  examination  of  reports  and  records,  and  my  conversations  with  other  law 
enforcement  agents  and  other  individuals,  as  well  as  my  training  and  experience.  Because  this 
Affidavit  is  being  submitted  for  the  limited  purpose  of  obtaining  the  Requested  Information,  it 
does  not  include  all  the  facts  that  I  have  learned  during  the  course  of  this  investigation.  Where  the 
contents  of  documents  and  the  actions,  statements,  and  conversations  of  others  are  reported  herein, 
they  are  reported  in  substance  and  in  part,  except  where  otherwise  indicated.  In  addition,  unless 
otherwise  indicated,  statements  by  others  referenced  in  this  Affidavit  were  not  necessarily  made 
to  me,  but  may  have  been  provided  to  me  by  someone  else  to  whom  I  have  spoken  or  whose  report 
I  have  read  (and  who  in  turn  may  have  had  either  direct  or  indirect  knowledge  of  the  statement). 
Similarly,  unless  otherwise  indicated,  information  in  this  Affidavit  resulting  from  surveillance 
does  not  necessarily  set  forth  my  personal  observations,  but  may  have  been  provided  to  me  by 
other  law  enforcement  agents  who  observed  the  events,  and  to  whom  I  have  spoken  or  whose 
report  I  have  read. 

4.  Target  Cellphones,  Subscriber,  Target  Subject,  and  Service  Provider.  The  Target 
Cellphones  referenced  in  this  Affidavit  are  the  cellphones  assigned  call  numbers 
and^^^^^^^|.  As  further  discussed  below,  the  Target  Cellphones  are  subscribed  to  in  the 
name  of  Michael  Cohen  (the  “Subscriber”).  The  Subscriber  is  believed  to  use  the  Target 
Cellphones  and  is  a  Target  Subject  of  this  investigation.  AT&T  is  the  Service  Provider  for  the 
Target  Cellphones. 


2018-04-07017.02.09 


2 


Case  l:18-cr-00602-WHP  Document  48-7  Filed  07/18/19  Page  15  of  38 


5.  Precision  Location  Capability.  Cellphone  service  providers  have  technical 
capabilities  that  allow  them  to  collect  at  least  two  kinds  of  information  about  the  locations  of  the 
cellphones  to  which  they  provide  service;  (a)  precision  location  information,  also  known  as  E-91 1 
Phase  II  data,  GPS  data,  or  latitude-longitude  data,  and  (b)  cell  site  data,  also  known  as 
“tower/face”  or  “tower/sector”  information.  Precision  location  information  provides  relatively 
precise  location  information  about  a  cellphone,  which  a  provider  can  typically  collect  either  via 
GPS  tracking  technology  hiiilt  into  the  phone  or  by  triangulating  the  device’s  signal  as  received 
by  the  provider’s  nearby  cell  towers.  Cell  site  data,  by  contrast,  reflects  only  the  cell  tower  and 
sector  thereof  utilized  in  routing  any  conununication  to  and  ftom  the  cellphone,  as  well  as  the 
approximate  range  of  the  cellphone  from  the  tower  during  the  commimication  (sometimes  referred 
to  as  “per-call  measurement”  (“PCM”)  or  “round-trip  time”  (“RTT”  or  ‘TSIELOS”  data).  Because 
cell  towers  are  often  a  half-mile  or  more  apart,  even  in  urban  areas,  and  can  be  ten  or  more  miles 
apart  in  rural  areas,  cell  site  data  is  typically  less  precise  than  precision  location  information.  Based 
on  my  training  and  experience,  I  know  that  the  Service  Provider  has  the  technical  ability  to  collect 
precision  location  information  from  any  cellphone  on  its  network,  includiag  by  initiating  a  signal 
on  the  Service  Provider’s  network  to  determine  the  phone’s  location.  I  further  know  that  cell  site 
data  is  routinely  collected  by  the  Service  Provider  in  the  course  of  routing  calls  placed  to  or  from 
any  cellphone  on  its  network.^ 

6.  Successor  Service  Provider.  Because  it  is  possible  that  the  Target  Subject  may  change 
cellphone  service  provider  during  the  course  of  this  investigation,  it  is  requested  that  the  warrant 


^  Toll  records  are  sometimes  necessary  or  helpful  in  order  to  obtain  or  interpret  historical  cell  site 
data  and  are  therefore  also  requested  herein. 
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and  investigative  order  requested  apply  without  need  for  further  order  to  any  Sueeessor  Service 
Provider  who  may  provide  service  to  the  Target  Cellphones  during  the  time  frames  at  issue  herein. 

II.  Facts  Establishing  Probable  Cause 

7.  Although  I  understand  that  probable  cause  is  not  necessary  to  obtain  all  of  the 
Requested  Information,  I  respectfully  submit  that  probable  cause  exists  to  beheve  that  the 
Requested  Information  will  lead  to  evidence  of  the  crime  of  52  U.S.C.  §§  30116(a)(1)(A)  and 
30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the  “Subject  Offense”),  as  well  as  the  location 
of  the  Target  Subject  who  is  engaged  in  the  Subject  Offense. 

Introduction 

8.  The  USAO  and  the  Federal  Bureau  of  Investigation  (the  “FBF’)  are  investigating  a 
criminal  violation  of  the  campaign  finance  laws  by  Michael  Cohen,  a  lawyer  who  holds  himself 
out  as  the  personal  attorney  for  President  Donald  J.  Trump.  As  detailed  below,  there  is  probable 
cause  to  believe  that  Cohen  made  an  excessive  in-ldnd  contribution  to  the  presidential  election 
campaign  of  then-candidate  Donald  Trump  in  the  form  of  a  $130,000  pa)mient  to  Stephanie 
Clifford,  an  individual  who  was  rumored  to  have  had  an  extramarital  affair  with  Trump,  in 
exchange  for  her  agreement  not  to  disclose  that  alleged  affair  on  the  eve  of  the  2016  presidential 
election. 

Prior  Relevant  Process 

9.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the  Special 
Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief  United 
States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails  and  other 
content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search  warrant 
for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 
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a.  On  or  about  My  1 8, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for  emails 


in  the  account 


@gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received  between 


January  1, 2016  and  July  18, 2017  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 


ffigmail.com  (the 


content  stored  in  the  iCloud  account  associated  with  Apple  ID  ; 


“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

c.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  Cohen  Gmail  Accormt  sent  or  received  between  June  1 , 20 1 5  and  November  1 3 , 20 1 7 
(the  “Second  Cohen  Gmail  Warranf ’). 


d.  On  or  about  November  1 3,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 


[the  “Cohen  MDCPC  Account”)  sent  or  received 


emails  in  the  accoimt 


between  the  opening  of  the  Cohen  MDCPC  Account^  and  November  13,  2017  (the  “First  Cohen 
MDCPC  Warrant”). 

10.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the  US  AO, 
which  is  working  with  the  FBI’s  New  York  Field  Office. 

11.  On  or  about  February  28,  2018,  the  US  AO  sought  and  obtained  search  warrants  for 
emails  in  Cohen  Gmail  Account  and  Cohen  MDCPC  Account,  among  other  accounts,  sent  or 
received  between  November  14,  2017  and  February  28,  2018  (the  “Third  Cohen  Gmail  Warrant” 
and  “Second  Cohen  MDCPC  Warrant”). 


^  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 
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12.  The  above-described  warrants  are  referred  to  herein  as  the  “Cohen  Emails  Warrants” 
and,  with  respect  to  the  iCloud  Warrant,  the  “Cohen  iCloud  Warrant.” 

The  Illegal  Campaign  Contribution  Scheme 

13.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  website 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  fdm  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

h.  Specifically,  on  or  about  October  11,2011,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  E!  News  that  “[t]he  totally  untrue  and  ridiculous  story . . .  emanated  from 

a  sleazy  and  disgusting  website _ The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

14.  On  or  about  Time  16, 2015,  Trump  formally  launched  his  2016  presidential  campaign. 
On  or  about  May  4, 20 1 6,  Trump  became  the  presumptive  Republican  Party  nominee  for  president, 
and  on  July  19,  2016,  Trump  officially  became  the  nominee.  Based  on  my  review  of  public 
sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as  part  of  the 
Tramp  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of  Tramp  or  his 
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campaign.  For  instance,  on  or  about  August  1 8, 20 1 6,  Cohen  appeared  on  CNN  to  defend  Trump’s  f 

i 

I" 

polling  numbers.  | 

15.  On  or  about  October  7,  2016,  The  Washington  Post  published  online  a  video  and 
accompanying  audio  in  which  Trump  referred  to  women  in  what  the  article  described  as  “vulgar 

terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The  { 

following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he  stated,  among  other  J 

things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 

video  are  one  of  them.  Anyone  who  knows  me  knows  these  words  don’t  reflect  who  I  am.  I  said  j 

I 

it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that  i 

|l 

representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood  j 

comment  was  an  old  and  isolated  incident.  j 

1 6.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Slate  magazine  j 

by.  a  reporter  who  interviewed  Clifford,  that  around  this  same  time,  in  or  about  October  2016,  j 

Clifford  was  in  discussions  with  ABC ’s  Good  Morning  America  show  and  Slate  magazine,  among  i 

other  media  sources,  to  provide  these  media  outlets  with  her  statement  about  her  alleged 
relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author  based  on 
conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to  be  paid  for 

her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized  in  a  2018 
email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  October  2016,  I  was  contacted  by 
counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  2011 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 
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17.  From  my  review  of  telephone  toll  records^  and  information  produced  pursuant  to  the 
iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 
Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer,"^  Tramp,  and  Hope  Hicks,  who  was  then 
press  secretary  for  Tramp’s  presidential  campaign.  For  these  text  messages  and  calls- — ^as  well  as 
all  of  the  text  messages  and  calls  referenced  in  this  affidavit  involving  Cohen — Cohen  used  one  of 


the  Target  Cellphones  for  the  communication. 

18.  Based  on  the  timing  of  the  calls  in  the  days  following  the  Access  Hollywood  story,  and 
the  content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  fiom  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  fom  minutes.^ 


^  My  attribution  of  certain  telephone  nrunbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  obtained  fiom  Cohen’s  telephone 
pursuant  to  the  iCloud  Warrant. 

^  Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

^  I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Tramp’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Tramp  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Tramp’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Tramp  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  leam  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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Based  on  the  toll  records  that  the  US  AO  has  obtained  to  date,  I  believe  that  this  was  the  first  call  f 

I 

Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 
in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  fom  minutes  later,  Cohen  called  Pecker  again  mid  they  spoke 
for  more  than  a  mmute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 

Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
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“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:31  a.m.,  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake, 
please  call  my  cell.” 

f  The  following  day,  on  October  10,2016,  at  10:58  a.m.,  Howard  sent  a  text  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regards  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanks.  Dylan.  Over  to  you  two.”  At  12:25  p.m.,  Davidson  sent  Cohen  a  text  message 
that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to  be  today. 
Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.^ 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  1 0, 2016,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement '  agreement  and  mutual 

^  As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However,  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  Clifford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 
according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10, 2016. 

19.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps  to 
complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which  Cohen 
could  transfer  fimds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  First 
Republic  Bank  (“First  Republic”),  as  well  as  my  participation  in  interviews  with  employees  of 
First  Republic,  I  have  learned  the  following: 

a.  On  the  morning  of  October  13, 2016,  at  8:54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 
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I 

I" 

b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  a  banker  at  First  Republic  j 

I 

f 

Bank  (“First  Republic  Employee-2”).  The  email  attached  documents  from  the  Secretary  of  State  J 

I 

of  Delaware  indicating  that  Cohen  had  formed  a  limited  liability  company  called  “Resolution  j 

Consultants  LLC”  on  September  30, 2016.  As  noted  above,  “Resolution  Consultants”  is  the  name 

of  the  entity  that  Cohen  had  told  Howard  he  had  formed  recently  after  Howard  said  Davidson  | 

would  “do  it.”  At  10:44  a.m.,  Cohen  called  First  Republic  Employee-2  and  told  him,  in  sum  and 

substance,  that  he  needed  an  account  in  the  name  of  “Resolution  Consultants”  opened  immediately, 

and  that  he  did  not  want  an  address  on  the  checks  written  out  of  the  account.  Later  that  day,  another  | 

I 

employee  at  First  Republic  emailed  Cohen  account  opening  paperwork  to  complete.  Cohen 
returned  the  account  opening  documents  partially  completed,  hut  failed  to  provide  a  copy  of  his  | 

driver’s  license  or  passport,  and  did  not  respond  to  the  employee’s  question  of  how  he  wanted  to  i 

fund  the  account.  As  a  result,  the  account  was  never  opened. 

c.  On  October  17, 2016,  Cohen  incorporated  Essential  Consultants  LLC  m  Delaware. 

That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

20.  Despite  these  steps  taken  hy  Cohen,  it  appears  that  the  negotiation  between  Cohen  and 
Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford,  and 
they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential  eleetion. 

Specifieally,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  iCloud 
Warrant,  and  public  sources,  I  know  the  following: 

a.  Aecording  to  an  article  in  The  Washington  Post,  whieh  quoted  emails  sent  from 
Cohen’s  email  aeeount  hosted  by  the  Trump  Organization,  on  Oetober  17, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 


/ 
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if  Cohen  did  not  complete  the  transaction.^  According  to  the  article,  Davidson  sent  Cohen  a  second 


I 


email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her  settlement  | 

agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they  spoke  for 
over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told  they’re  | 

I 

going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.”  Based  | 


on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard  that 


Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 


I 

I 

i 

I 

I 

I 

I 

I 

I 

I 

I 

I 

I 


t 

if- 


I 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???”  1 

I 

V.  At  6 :44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  takiug  my  calls.”  f 

Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach?”  Howard  | 

responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  mvolvement  iu  this  investigation,  I  | 


^  Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  Government  has  not 
requested  documents  fi'om  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the 
email  referenced  in  this  article. 
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understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson  about  the 


I- 


matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 
article  noted  that  Chfford  had  declined  to  comment. 

21 .  On  or  about  October  25, 2016,  the  communications  between  Cohen,  Davidson,  Howard 
and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford.  Specifically, 
based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “CaU  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 
minutes.  At  7:1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26,  2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9 : 04  a.m. — ^less  than  thirty  minutes  after  speaking  with  Trump— 


I 


Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential  ^ 

f 

Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second  f 
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email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  a  particular  employee  at  First  Republic  (“First 
Republic  Employee-2”)  and  told  him,  in  sum  and  substance,  that  he  decided  not  to  open  an  account 
in  the  name  of  “Resolution  Consulting”  and  instead  would  be  opening  a  real  estate  consulting 
company  in  the  name  of  “Essential  Consultants.”  Cohen  told  First  Republic  Employee-2  that  he 
was  at  Trump  Tower,  and  wanted  to  go  to  a  First  Republic  branch  across  the  street  to  open  the 
account,  so  First  Republic  Employee-2  called  another  employee  of  First  Republic  (“First  Republic 
Employee-1”),  a  preferred  banker  at  that  branch,  to  assist  Cohen.  At  1 1:00  a.m..  First  Republic 
Employee- 1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First  Republic 
Employee- 1,  that  around  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower — on  the 
same,  floor  as  the  Trump  Organization — and  went  through  account  opening  questions,  including 
know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your-customer 
questions  about  the  purpose  of  the  accoimt — ^the  answers  to  which  First  Republic  Employee-1 
entered  into  a  form — Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Based 
on  my  review  of  records  obtained  firom  First  Republic,  it  appears  that  this  accoimt  (the  “Essential 
Consultants  Accounf ’)  was  created  at  a  time  between  1 1 :00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Bank. 
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f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October  26, 
2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 


Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
and  cormected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  hack  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approxiniately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 


“check  your  Gmad  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  LLC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 
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22.  On  October  27, 201 6,  Cohen  made  a  payment  to  Davidson  of  $  1 30,000 — ^with  the  funds 
intended  for  Clifford — ^for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
toll  records,  bank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen 
Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 
the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  aU 
paperwork  contains  the  correct  name  of  Essential  Consultants  LLC.  I  thank  you  in  advance  for 
your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account — 
which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit — ^to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  LLC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  10:50  a.m..  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 


2018-04-07017.02.09 


17 


Case  l:18-cr-00602-WHP  Document  48-7  Filed  07/18/19  Page  30  of  38 

23.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction  with 
Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
iCloud  Warrant,  public  sources,  and  bank  records,  I  know  the  following: 

a.  On  October  28,  201 6,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Begitming  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  ftom  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  201 8, 1  have  learned  that 
On  or  about  October  28,  2016,  “EC,  EEC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  [Dennison]”  in  exchange  for 
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$  1 30,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson’s”  attorney,  f 

i 

who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC,  [ 

LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in  the 
agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message  | 

with  a  pictmre  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package  1 

shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy.mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it  ! 

appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 

II 

Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At  ' 

approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  sbc  minutes.  ' 

24.  On  November  4, 201 6,  just  three  days  after  the  Clifford  transaction  was  completed  and  f 

just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  pubhshed  an  article  alleging  r 

I 

f 

that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy  model  [ 


2018-04-07017.02.09 


19 


Case  l:18-cr-00602-WHP  Document  48-7  Filed  07/18/19  Page  32  of  38 


Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI  had  agreed  to 
pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — -just  days  before  Election 
Day — ^about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent  Howard 
a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump  Organization 
lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 
minute  later,  Howard  responded:  “Til  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 
want  to  push  her  over  the  edge.  She ’s  on  side  at  present  and  we  have  a  sohd  position  and  a  plausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
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discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
plausible  position  that  she  is  rightfully  employed  as  a  colmnnist”  was  a  referenee  to  the  fact  that 
AMI  had  given  MeDougal  payments  for  her  role  as  a  purported  columnist  for  the  eompany. 

e.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated  “he’s 
pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment  from 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  mmutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  mmute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  callmg  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across. 
The  next  morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far 
I  see  only  6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying! !  It’s 
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working!”  Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary, 
I  have  a  statement  by  Storm  denying  everjdhing  and  contradicting  the  other  pom  stars  statement. 
I  wouldn’t  use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced 
recorded  audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a 
statement  could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but  was 
unnecessary  at  that  time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that 
morning.  Pecker  spoke  to  Trump. 

25.  On  or  about  November  8,  2016,  Tmmp  won  the  election  for  President  of  the  United 

States. 

26.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  government 
watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Cliftbrd. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  breaking.  I  knew  the  allegation  to  be  false,  but  /  am 
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also  a  realist  who  understands  that  just  because  something  is  false  doesn  Y 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
occur.  I  negotiated  a  non-disclosnre  agreement  with  Ms.  Clifford’s 
eormsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  (“...the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  201 6. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  201 8,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  201 8,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Tmmp  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 
directly  or  indirectly.” 
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d.  On  or  about  March  9, 20 1 8,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 

\ 

from  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.” 

27.  For  the  foregoing  reasons,  there  is  probable  cause  to  believe  that  Cohen  used  the  Target 
Cellphones  to  commit  the  Subject  Offense.  Cohen  used  the  Target  Cellphones  to  communicate 
with  Davidson,  Howard,  Pecker,  and  others  about  the  payment  to  Clifford  on  the  eve  of  the 
election.  Indeed,  while  Cohen  denies  having  given  an  unlawful  contribution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $130,000  ofhis  “personal  funds”  to  Clifford  and  that  the  payment 
occurred  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
about  his  behavior  toward  women,  even  though  allegations  of  an  affair  between  Trump  and 
Clifford  existed  since  2011.  In  addition,  the  communication  records  set  forth  above  make  evident 
that  Cohen  eommunicated — ^using  the  Target  Cellphones — ^with  members  of  the  Trump  campaign 
and  others  about  his  negotiation  with  Clifford’s  attorney  and  the  need  to  preclude  Clifford  from 
making  a  statement  that  would  have  reflected  negatively  on  the  candidate  in  advance  of  the 
forthcoming  election. 

28. 1  have  reviewed  records  maintained  by  AT&T,  from  which  I  have  learned,  in  substanee 
and  in  part,  that  the  Target  Cellphones  are  still  active.  Based  on  my  training  and  experience,  my 
familiarity  with  this  investigation,  and  the  information  set  forth  above,  I  therefore  beheve  that  the 
Requested  Information  will  lead  to  evidence  of  the  Subject  Offense.  Specifically,  the  Requested 
Information  includes  historical  location  data  for  the  Target  Cellphones,  which  may  show  where 
the  Target  Cellphones — and  by  extension  Cohen — rwas  on  particular  dates  and  times  between 
October  1 ,  20 1 6 — ^the  approximate  time  that  negotiations  regarding  the  Clifford  payment  began — 
and  the  present.  That  location  information  can,  among  other  things,  be  used  to  corroborate  any  in- 
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person  meetings  between  the  Cohen  and  the  other  individuals  involved  in  the  negotiations  of  the 
the  payment  to  Clifford. 

29.  Based  on  my  training  and  experience,  I  also  know  that  historical  location  information 
can  be  useful  to  establish  a  pattern  of  behavior  by  a  particular  individual,  which  assists  law 
enforcement  in  tracking  such  an  individual — and,  thereby,  locating  his  electronic  devices.  Along 
with  the  historical  information,  the  prospective  information  will  also  lead  to  the  present  location 
of  the  Target  Cellphones;  law  enforcement  may  then  obtain  evidence  from  the  Target  Cellphones, 
by  subpoena  or  search  warrant,  including  but  not  limited  to  contact  lists  containing  contact 
information  for  participants  in  the  illegal  campaign  contribution  scheme  and  well  as  text  messages 
between  these  participants. 

III.  Request  for  Warrant  and  Order 

30.  Based  on  the  foregoing  I  respectfully  request  that  the  Court  require  the  Service  Provider 

to  provide  the  Requested  Information  as  specified  further  in  the  Warrant  and  Order  proposed 

herewith,  including  prospective  precision  location  and  cell  site  data  for  a  period  of  45  days  from 

the  date  of  this  Order  (or  the  date  that  the  Target  Cellphones  are  seized,  whichever  comes  first), 

historical  ceU  site  data  and  toll  records  for  the  period  from  October  1,  2016  through  the-date-offijis 

/  tol  ^ 

0rd«r,  and  pen  register  information  for  a  period  of  60  days  from  the  date  of  this  Order.  ^  r€t<^  f 

31.  Nondisclosure.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not 
publicly  known.  As  a  result,  premature  public  disclosure  of  this  affidavit  or  the  requested  Warraiit 
and  Order  could  alert  potential  criminal  targets  that  they  are  under  investigation,  causmg  them  to 
destroy  evidence,  flee  from  prosecution,  or  otherwise  seriously  jeopardize  the  investigation. 
Accordingly,  I  respectfully  request  that  the  Provider  be  directed  not  to  notify  the  subscriber  or 
others  of  the  existence  of  the  Warrant  and  Order  for  a  period  of  1 80  days,  and  that  the  Warrant  and 
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Order  and  all  supporting  papers  be  maintained  under  seal  until  the  Court  orders  otherwise,  as 
specified  in  the  Application  submitted  in  conjunction  with  this  Affidavit. 


United  States  Attorney’s  Office 
Southern  District  of  New  York 


Sworn  to  before  njc  this 
^YthjlaypfA^ 


HONOI^LE  HENRY  PITMAN 
United  States  Magistrate  Judge 
Southern  Disirict  of  New  York 
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I 

I' 

IN  THE  UNITED  STATES  DISTRICT  COURT  j- 

FOR  THE  SOUTHERN  DISTRICT  OF  NEW  YORK  I 


IN  THE  MATTER  OF  THE  USE  OF  A  CELL- 
SITE  SIMULATOR  TO  LOCATE  THE 
CELLULAR  DEVICES  ASSIGNED  CALL 
NUMBERS  AND 


l-8MA6-gS74 

Filed  Under  Seal 


AFFIDAVIT  IN  SUPPORT  OF 
AN  APPLICATION  FOR  A  SEARCH  WARRANT 


I, 

INTRODUCTION  AND  AGENT  BACKGROUND 

1.  I  make  this  affidavit  in  support  of  an  application  for  a  search  warrant  mider 

Federal  Rule  of  Criminal  Procedure  41  to  authorize  law  enforcement  to  employ  an  electronic 
investigative  technique,  which  is  described  in  Attachment  B,  to  determine  the  location  of  the 
cellular  devices  assigned  call  numbers  m|m|||||||  (the  “Target  Cellular 

Devices”),  which  ai-e  described  in  Attachment  A. 

2.  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (‘TBI”).  I 
have  been  a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training 
in  these  positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a 
wide  array  of  financial  crimes,  including  offenses  involving  public  corruption.  I  also  have 
training  and  experience  executing  warrants  for  cellphone  location  data 

3.  The  facts  in  this  affidavit  come  Ifom  my  personal  observations,  my  training  and 
experience,  and  information  obtained  from  other  agents  and  witnesses.  This  affidavit  is  intended 
to  show  merely  that  there  is  sufficient  probable  cause,  for  the  requested  warrant  and  does  not  set 
forth  all  of  my  knowledge  about  this  matter. 


being  first  duly  sworn,  hereby  depose  and  state  as  follows: 
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4.  One  purpose  of  applying  for  this  warrant  is  to  determine  with  precision  the  Target 
Cellular  Devices’  location.  However,  there  is  reason  to  believe  the  Target  Cellular  Devices  are 
currently  located  somewhere  within  this  district  because  the  Target  Cellulai'  Devices’  owner  is 
known  to  spend  most  of  his  time  in  this  district.  Pursuant  to  Rule  4 1  (b)(2),  law  enforcement  may 
locate  the  Target  Cellular  Devices  outside  the  district  provided  the  device  is  within  the  district 
when  the  warrant  is  issued. 

5.  Based  on  the  facts  set  forth  in  this  affidavit,  there  is  probable  cause  to  believe  that 
violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offense”)  has  been  committed,  are  being  committed,  and  will  be  committed  by 
Michael  Cohen  and  others.  There  is  also  probable  cause  to  believe  that  the  location  of  the  Target 
Cellular  Devices  will  lead  to  evidence  of  the  Subject  Offense,  as  detailed  below. 

6.  Because  collecting  the  information  authorized  by  this  warrant  may  fall  within  the 
statutory  definitions  of  a  “pen  register”  or  a  “trap  and  trace  device,”  see  18  U.S.C.  §  3127(3)  & 
(4),  this  warrant  is  designed  to  comply  with  the  Pen  Register  Statute  as  well  as  Rule  41.  See  18 
U.S.C.  §§  3121-3127.  This  warrant  therefore  includes  all  the  information  required  to  be  included 
in  a  pen  register  order.  See  18  U.S.C.  §  3 123(b)(1). 

PROBABLE  CAUSE 
Introduction 

7.  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York 

(“USAO”)  and  the  FBI  are  investigating  a  criminal  violation  of  the  campaign  finance  laws  by 

Michael  Cohen,  a  lawyer  who  holds  himself  out  as  the  personal  attorney  for  President  Donald  J. 

Trump.  As  detailed  below,  there  is  probable  cause  to  believe  that  Cohen  made  an  excessive  in- 

kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald  Tinunp  in  the 

2 
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form  of  a  $130,000  payment  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an 
extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that  alleged  affair 
on  the  eve  of  the  2016  presidential  election. 

8.  The  Target  Cellular  Devices  referenced  in  this  Affidavit  are  the  cellphones 

assigned  call  numbers^^^^^^^and  As  further  discussed  below,  the  Target 

Cellular  Devices  are  subscribed  to  in  the  name  of  Michael  Cohen  (the  “Subscriber”).  The 
Subscriber  is  believed  to  use  the  Target  Cellphones  and  is  a  Target  Subject  of  this  investigation. 
AT&T  is  the  Seiwice  Provider  for  the  Target  Cellphones. 

Prior  Relevant  Process 

9.  In  connection  with  an  hivestigation  then  being  conducted  by  the  Office  of 
the  Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  HoweU, 
Chief  United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails 
and  other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 

a.  On  or  about  July  1 8, 20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for  emails 
in  the  accoun^^^^^^^^|^gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received  between 
January  1,  2016  and  July  18,  2017  (the  “First  Cohen  Gmail  Warranf’). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
content  stored  in  the  iCloud  account  associated  with  Apple  ID  ^^^^^|@gmail.com  (the 
“Cohen  iCloud  Accounf  ’  and  the  “Cohen  iCloud  Warrant”). 

c.  On  or  about  November  1 3 ,  20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,2015  and  November  13,2017 
(the  “Second  Cohen  Gmail  Warrant”). 
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d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  account  “Cohen  MDCPC  Account”)  sent  or  received 

between  the  opening  of  the  Cohen  MDCPC  Account^  and  November  13,  2017  (the  “First  Cohen 
MDCPC  Warranf’). 

10.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen 
to  the  USAO,  which  is  working  with  the  FBFs  New  York  Field  Office. 

11.  On  or  about  February  28,  2018,  the  USAO  and  FBI  sought  and  obtained 

search  warrants  for  emails  in  Cohen  Gmail  Account  and  Cohen  MDCPC  Account,  among  other 
accoimts,  sent  or  received  between  November  14,  2017  and  February  28,  2018  (the  “Third  Cohen 
Gmail  Warrant”  and  “Second  Cohen  MDCPC  Warrant”).^ 

12.  The  above-described  waiTants  ai'e  referred  to  herein  as  the  “Cohen  Emails 
Warrants”  and,  with  respect  to  the  iCloud  Warrant,  the  “Cohen  iCloud  Warrant.” 

The  Illegal  Campaign  Contribution  Scheme 

13.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  website 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 


'  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  Icnow  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  fi'om  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 

^  On  or  about  February  28, 2018  and  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  search  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  11,2011,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 

Organization,  stated  to  E!  News  that  “[t]he  totally  mitrue  and  ridiculous  story  . . .  emanated  JBrom 

a  sleazy  and  disgusting  website _ The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit .  .  .  [and]  Mr.  Trump  and  the  Trump  Oi'ganization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

14.  On  or  about  June  16,  2015,  Trump  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4,  20 1 6,  Trump  became  the  presumptive  Republican  Party  nominee 
for  president,  and  on  July  1 9,  20 1 6,  Trump  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Tmmp  or  his  campaign.  For  instance,  on  or  about  August  1 8,  2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 

15.  On  or  about  October  7, 2016,  The  jTas/zwgtonPo^f  publishedonlineavideo 

and  accompanying  audio  in  which  Trump  referred  to  women  m  what  the  aiticle  described  as 

“vulgar  terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access 

Hollywood.  The  following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he 

stated,  among  other  things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this 
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more  than  a  decade  old  video  are  one  of  them.  Anyone  who  Icnows  me  loiows  these  words  don’t 
reflect  who  I  am.  I  said  it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public 
sources,  I  also  know  that  representatives  of  the  Tnimp  Campaign  stated,  in  sum  and  substance, 
that  the  Access  Hollywood  comment  was  an  old  and  isolated  incident. 

16.  Based  on  my  review  of  public  sources,  includmg  an  article  published  in 
Slate  magazine  by  a  reporter  who  interviewed  Clifford,  that  around  this  same  time,  in  or  about 
October  2016,  Clifford  was  in  discussions  with  ABC\s  Good  Morning  America  show  and  Slate 
magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement  about  her 
alleged  relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author  based  on 
conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to  be  paid  for 
her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized  in  a  2018 
email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  October  2016,  I  was  contacted  by 
counsel  for  Ms.  CUfford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  2011 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

17.  From  my  review  of  telephone  toll  records^  and  information  produced 
pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days 
following  the  Access  Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and 
emails  with  Keith  Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard 


^  My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pursuant  to  the  iCloud  Warrant. 
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of  American  Media,  Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer,^  Trump,  and  Hope 
Hicks,  who  was  then  press  secretaiy  for  Trump  ’  s  presidential  campaign.  For  these  text  messages 
and  calls — ^as  well  as  all  of  the  text  messages  and  calls  referenced  in  this  affidavit  involving 
Cohen — Cohen  used  one  of  the  Target  Cellular  Devices  for  the  communication. 

18.  Based  on  the  timing  of  the  calls  in  the  days  following  tlie  Access  Hollywood 
stoiy,  and  the  content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these 
communications  concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake 
of  the  Access  Hollywood  stoiy.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 20 1 6,  at  approximately  7 :20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes.^ 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 
Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
on  the  telephone  about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  caU  on  October 


Pecker  is  President  of  AMI  and,  according  to  his  ovm  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

^  I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  loiow  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hides. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Tiump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  another  law  enforcement  agent  who  has  spoken  to  a  law  enforcement  agent 
who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated,  in  substance,  to  the  best  of  her 
recollection,  she  did  not  learn  about  the  allegations  made  by  Clifford  until  early  November  2016. 
Hicks  was  not  specifically  asked  about  this  three-way  call. 
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8,  2016,  Cohen  and  Trump  had  spoken  once  m  May,  once  in  June,  once  in  July,  zero  times  in 
August,  and  twice  in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again^and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3 :3 1  a.m.,  now  on  October  9,  20 1 6,  Cohen  sent  Howard  a  text  message  in 
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response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that 
said:  “Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you 
wake,  please  call  my  cell.” 

f.  The  following  day,  on  October  10, 2016,  at  10:58  a.m.,  Howard  sent  atext  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regai'ds  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
nppnrhmity.  Thanks.  Dylan.  Over  to  you  two.”  At  12:25  p.m.,  Davidson  sent  Cohen  a  text 

message  that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  —  In  my  opinion,  it  needs  to 
be  today.  Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on 
my  participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.^ 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  1 0, 20 1 6,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 
according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 


^  As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However,  because  these  communications  were  in  close  temporal  proxunity  to  the  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  CUfford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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pseudonym  in  “confidential  settlement  agieement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement’  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10, 2016. 

19.  It  appears  that  on  October  13, 2016,  and  the  days  that  followed,  Cohen  took 
steps  to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records, 
information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records 
maintained  by  First  Republic  Bank  (“First  Republic”),  as  well  as  my  participation  in  interviews 
with  employees  of  First  Republic,  I  have  learned  the  following: 

a.  On  the  morning  of  October  13, 2016,  at  8:54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  otlrer  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encr5T3ted  calls. 

b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  a  banker  at  First  Republic 
Bank  (“First  Republic  Employee-2”).  The  email  attached  documents  from  the  Secretary  of  State 
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of  Delaware  indicating  that  Cohen  had  formed  a  limited  liability  company  called  “Resolution 
Consultants  LLC”  on  September  30, 2016.  As  noted  above,  “Resolution  Consultants”  is  the  name 
of  the  entity  that  Cohen  had  told  Howard  he  had  fonned  recently  after  Howard  said  Davidson 
would  “do  it.”  At  10:44  a.m.,  Cohen  called  First  Republic  Employee-2  and  told  him,  in  sum  and 
substance,  that  he  needed  an  account  in  the  name  of  “Resolution  Consultants”  opened  immediately, 
and  that  he  did  not  want  an  address  on  the  checks  written  out  of  die  account.  Later  that  day, 
another  employee  at  First  Republic  emailed  Cohen  account  opening  paperwork  to  complete. 
Cohen  returned  the  account  opening  documents  partially  completed,  but  failed  to  provide  a  copy 
of  his  driver’s  license  or  passport,  and  did  not  respond  to  the  employee’s  question  of  how  he 
wanted  to  ftmd  the  account.  As  a  result,  the  account  was  never  opened. 

c.  On  October  1 7, 2016,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

20.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between 
Cohen  and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client, 
Clifford,  and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the 
presidential  election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained 
pursuant  to  the  iCloud  Warrant,  and  public  sources,  I  Icnow  the  following: 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’s  email  account  hosted  by  the  Trump  Organization,  on  October  17, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction^  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  fluiTy  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: . .  . 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told 
they’re  going  with  DailyMail.  Are  you  awai-e?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  exti'amarital  affair  with  Tmmp  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howai-d  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5 :03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

V.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taking  my 

calls.”  Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach?” 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


^  Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  USAO  has  not  requested 
documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the  email 
referenced  in  this  article. 
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investigation,  I  understand  Howar  d’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  talcing  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Tiaimp  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair-  with  Clifford.  However,  the 
article  noted  that  Clifford  had  declined  to  comment.  ^ 

21.  On  or  about  October  25,  2016,  the  communications  between  Cohen, 
Davidson,  Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving 
Clifford.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
Cohen  Email  Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned 
the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howai-d  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next 
half  hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about 
eight  minutes.  At  7: 1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26,  2016,  at  8:26  a.m.,  Cohen  called  Tmmp 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9:04  a.m. — less  than  thirty  minutes  after  speaking  with  Tmmp^ — 

Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
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Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two 
minutes  later  at  9:06  a.m.  and  with  the  certification  of  fonnation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  a  particular  employee  at  First  Republic  (“First 
Republic  Employee-2”)  and  told  hhn,  in  sum  and  substance,  that  he  decided  not  to  open  an  account 
in  the  name  of  “Resolution  Consulting”  and  instead  would  be  opening  a  real  estate  consulting 
company  in  the  name  of  “Essential  Consultants.”  Cohen  told  First  Republic  Employee-2  that  he 

was  at  Trump  Tower,  and  wanted  to  go  to  a  First  Republic  branch  across  the  street  to  open  the 
account,  so  First  Republic  Employee-2  called  another  employee  of  First  Republic  (“First  Republic 
Employee-l”),  a  preferred  banker  at  that  branch,  to  assist  Cohen.  At  1 1:00  a.m..  First  Republic 
Employee-1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First  Republic 
Employee-1,  that  around  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower — on  the 
same  floor  as  the  Trump  Organization^ — and  went  through  account  opening  questions,  including 
know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  Icnow-your-customer 
questions  about  the  purpose  of  the  accoimt — ^the  answers  to  which  First  Republic  Employee-1 
entered  into  a  form — Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Based 
on  my  review  of  records  obtained  fi'om  First  Republic,  it  appears  that  this  account  (the  “Essential 
Consultants  Account”)  was  created  at  a  time  between  1 1 :00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1:49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an 

attorney  client  trust  account  at  City  National  Bank. 
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f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October 
26,  2016,  First  Republic  Employee-2’ s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

 g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  spealc?  Imp^ortant.” 

Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
and  connected  for  about  thufy  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thufeen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confumation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  LLC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agi'eement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 
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22.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000 — 
with  the  funds  intended  for  Clifford — ^for  the  purpose  of  securing  her  ongoing  silence  witli  respect 
to  the  allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my 
review  of  toll  records,  banlc  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and 
Cohen  Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 
the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  EEC.  I  thank  you  in  advance  for 
your  assistance  and  look  fomard  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  papemork  to  wire  $130,000  from  the  Essential  Consultants  Account — 
which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit — ^to  the  attorney  client 
trust  account  at  City  National  Banlc  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  mftil  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  coiporation,  (Essential  Consultants  EEC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disbui'se.  Fair?” 

d.  At  10:50  a.m..  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 
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23.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the 
ti-ansaction  with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained 
pursuant  to  the  iCloud  Warrant,  public  sources,  and  banlc  records,  I  know  the  following: 

a.  On  October  28,  2016,  at  11:48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  comiected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 

message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howai'd  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomon'ow.”  Cohen  responded  “Thanlc  you”  to  Howard  and  “Thanlcs 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  couit  filings  that  became  public  in  20 1 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  EEC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  infonnation  pertaining  to  [Dennison]”  in  exchange  for 
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$130,000.  The  agreement  provided  that  “EC,  LLC”  would  whe  the  funds  to  “Peterson’s” 
attorney,  who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of 
“EC,  LLC.”  The  agreement  stated  drat  the  address  for  “EC,  LLC,”  which  was  later  refen-ed  to  in 
the  agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Banlcto  a  banlc  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 

settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  deliveiy  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but 
it  appeai-s  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to 
Kellyaime  Conway,  who  at  the  time  was  Tmmp  ’  s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

24.  On  November  4,  2016,  just  three  days  after  the  Clifford  transaction  was 
completed  and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an 
article  alleging  that  the  National  Enquirer  had  “Shielded  Donald  Tmmp”  from  allegations  by 
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Playboy  model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI 
had  agreed  to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented 
by  Davidson.  Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen 
Email  Warrants  and  iCloud  Warrant,  and  public  sources,  it  appeal's  that  Cohen  spoke  frequently 
to  Davidson,  Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication^ — -just  days 
before  Election  Day^ — ^about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from 
gaining  national  traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent 
Howard  a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump 
Organization  lawyer.  The  forwarded  email  was  fr'om  a  Wall  Street  Journal  reporter,  and  asked  for 
comment  from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  fficlcs  several 
times,  including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 

really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 

minute  later,  Howard  responded:  “Fll  ask  him  again.  We  just  need  her  to  disappear'.”  Cohen 

responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  caimot  push  her.” 

At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 

want  to  push  her  over  the  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 

position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 

investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
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discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based 

on  my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated 
“he’s  pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal 
could  publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment 
from  AMI.  It  loolcs  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  fi-ee?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howai'd  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across. 
The  next  morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far 
I  see  only  6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying! !  It’s 
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working!”  Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if 
necessary,  I  have  a  statement  by  Storm  denying  ever3^hing  and  contradicting  the  other  pom  stars 
statement.  I  wouldn’t  use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!” 
Based  on  my  involvement  in  this  investigation,  I  believe  Cohen  was  refeming  to  the  above- 
referenced  recorded  audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating 
that  such  a  statement  could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but 
was  unnecessary  at  that  time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later 

that  morning.  Pecker  spoke  to  Tmmp. 

25.  On  or  about  November  8,  2016,  Trump  won  tire  election  for  President  of 
the  United  States. 

26.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that 
Cohen  arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a 
government  watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging 
that  Cohen  had  violated  campaign  finance  laws  by  maldng  the  payment  to  Clifford.  Based  on  my 
review  public  sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email 
Warrants,  I  have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
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keep  the  story  from  breaking.  I  Icnew  the  allegation  to  be  false,  but  I  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn ’t 
mean  that  it  doesn 't  create  harm  and  damage.  I  could  not  allow  this  to 
occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agi'eement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outl^mdish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 

is  an  acloiowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  (^‘...the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Tramp  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  tlie  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “fri  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Tramp  Organization  nor  the  Trump  campaign 
was  a  party  to  the  fransaction  with  Ms.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 


directly  or  indirectly.” 
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d.  On  or  about  March  9,  2018,  Cohen  stated  to  ABC  News  that  “die  funds  were  taken 
fi'om  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.” 

27.  For  the  foregomg  reasons,  there  is  probable  cause  to  believe  that  Cohen 
committed  the  Subject  Offense  by  making  an  in-kind  contribution  to  Trump  or  the  Trump 
campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  election.  Indeed,  while  Cohen 
denies  having  given  an  unlawful  contribution,  in  his  own  statements  Cohen  has  admitted  that  he 
paid  $130.000  of  his  “personal  funds”  to  Clifford  and  that  the  payment  occurred  less  than  two 
weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations  about  his  behavior 
toward  women,  even  though  allegations  of  an  affair  between  Trump  and  Clifford  existed  since 
2011. 

28.  I  have  reviewed  records  maintained  by  AT&T,  from  which  I  have  learned, 
m  substance  and  in  part,  that  the  Target  Cellulai-  Devices  ai-e  still  active.  Based  on  my  training 
and  experience,  my  familiarity  with  this  investigation,  and  the  information  set  forth  above,  I 
therefore  believe  that  the  requested  data  will  lead  to  evidence  of  the  Subject  Offense. 
Specifically,  information  will  lead  to  the  present  location  of  the  Target  Cellular  Devices;  law 
enforcement  may  then  obtain  evidence  from  the  Target  Cellular  Devices,  by  subpoena  or  search 
warrant,  including  but  not  limited  to  contact  lists  containing  contact  information  for  participants 
in  the  illegal  campaign  contribution  scheme  and  well  as  text  messages  between  these  participants. 

MANKER  OF  EXECUTION 

29.  In  my  framing  and  experience,  I  have  learned  that  cellular  phones  and  other 

cellular  devices  communicate  wirelessly  across  a  network  of  cellular  infrastructiu'e,  including 

towers  that  route  and  connect  individual  communications.  When  sending  or  receiving  a 

communication,  a  cellular  device  broadcasts  certain  cellular  and  wifi  signals  to  the  cellular  tower 
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that  is  routing  its  communication.  These  cellular-  and  wifi  signals  mclude  a  cellular  device’s 
unique  identifiers. 

30.  To  facilitate  execution  of  this  waiTant  to  determine  the  location  of  the  Target 
Cellular  Devices,  law  enforcement  may  use  an  investigative  device  or  devices  capable  of 
broadcasting  cellular  and  wifi  signals  that  will  be  received  by  the  Target  Cellular  Devices  or 
receiving  cellular  and  wifi  signals  from  nearby  cellular  devices,  including  the  Target  Cellular 

Devices. _ Such  a  device  may  function  in  some  respects  like  a  cellular  tower,  except  that  it  will  not 

be  connected  to  the  cellular  network  and  cannot  be  used  by  a  cell  phone  to  communicate  with 
others.  The  device  may  send  a  signal  to  the  Target  Cellular  Devices  and  nearby  cellular  devices 
and  thereby  prompt  them  to  send  cellular  and  wifi  signals  that  include  the  unique  identifier  of  the 
device.  Law  enforcement  may  monitor  the  cellular  and  wifi  signals  broadcast  by  the  Target 
Cellular  Devices  for  non-content  signal  information  and  use  that  information  to  determine  the 
Target  Cellular  Devices’  location,  even  if  it  is  located  inside  a  house,  apartment,  or  other  building. 
The  device  will  not  intercept  the  contents  of  the  Target  Cellular  Devices’  communications,  such 
as  telephone  calls,  text  messages,  and  other  electronic  communications.  Further,  the  device  will 
not  collect  any  other  data  stored  on  the  Target  Cellular  Devices,  including  e-mails,  text  messages, 
contact  lists,  images,  or  Global  Positioning  System  (GPS)  data. 

31.  The  investigative  device  may  interrupt  cellular  service  of  phones  or  other 
cellular  devices  within  its  immediate  vicinity.  Any  service  disruption  to  non-target  devices  will 
be  brief  and  temporary,  and  all  operations  will  attempt  to  limit  the  interference  with  such  devices. 
In  order  to  connect  with  the  Target  Cellular  Devices,  the  device  may  briefly  exchange  cellular  and 
wifi  signals  with  all  phones  or  other  cellular  devices  in  its  vicinity  to  determine  whether  those 
devices’  rmique  identifiers  match  the  identifiers  of  the  Target  Cellular  Devices.  These  cellular 
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and  wifi  signals  may  include  cell  phone  identifiers.  The  device  will  not  complete  a  connection 
with  cellular  devices  determined  not  to  be  the  Tai-get  Cellular  Devices,  and  law  enforcement  will 
limit  collection  of  information  fi'om  devices  other  than  the  Target  Cellular  Devices.  To  the  extent 
that  any  information  from  a  cellular  device  other  than  the  Target  Cellular  Devices  is  collected  by 
the  law  enforcement  device,  law  enforcement  will  delete  that  information,  and  law  enforcement 
will  malce  no  investigative  use  of  it  absent  further  order  of  the  court,  other  than  distinguishing  the 
Target  Cellular’  Devices  fronr  all  other  cellular  devices.  

AUTHORIZATION  REQUEST 

32.  Based  on  the  foregoing,  I  request  that  the  Court  issue  the  proposed  search 
warrant,  pursuant  to  Federal  Rule  of  Criminal  Procedure  41.  The  proposed  warrant  also  will 
function  as  a  pen  register  order  rmder  18  U.S.C.  §  3123. 

33.  I  further  request,  pru’suant  to  18  U.S.C.  §  3103a(b)  and  Federal  Rule  of 
Criminal  Procedure  41(1)(3),  that  the  Court  authorize  the  officer  executing  the  warrant  to  delay 
notice  until  30  days  from  the  end  of  the  period  of  authorized  surveillance.  This  delay  is  justified 
because  there  is  reasonable  cause  to  believe  that  providing  immediate  notification  of  the  warrant 
may  have  an  adverse  result,  as  defined  in  18  U.S.C.  §  2705.  Providing  immediate  notice  to  the 
subscriber  or  user  of  the  Target  Cellular  Devices  would  seriously  jeopai’dize  the  ongoing 
investigation,  as  such  a  disclosure  would  give  that  person  an  opportunity  to  destroy  evidence, 
cliange  patterns  of  behavior,  and  notify  confederates.  See  18  U.S.C.  §  3103a(b)(l).  There  is 
reasonable  neeessity  for  the  use  of  the  technique  described  above,  for  the  reasons  set  forth  above. 

18  U.S.C.  §  3103a(b)(2). 
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34.  I  further  request  that  tlie  Court  authorize  execution  of  the  warrant  at  any 
time  of  day  or  night,  owing  to  the  potential  need  to  locate  the  Target  Cellular  Devices  outside  of 


daytime  hours. 


35.  I  further  request  that  the  Court  order  that  all  papers  in  support  of  this 


application,  including  the  affidavit  and  search  waivant,  be  sealed  until  further  order  of  the  Court.  j 

These  documents  discuss  an  ongoing  criminal  investigation  tliat  is  neither  public  nor  known  to  all  | 

of  the  targets  of  the  investigation.  Accordingly,  there  is  good  cause  to  seal  these  documents  _ _  j 

because  their  premature  disclosure  may  seriously  jeopardize  that  investigation. 

36.  A  search  warrant  may  not  be  legally  necessary  to  compel  the  investigative 
technique  described  herein.  Nevertheless,  I  hereby  submit  this  warrant  application  out  of  an  ; 


abundance  of  caution. 


Respectfully  submitted. 


Federal  Bureau  of  Investigation 


Subscribed  and  sworn  to  before  me  y  ^  ^  ^  ^ 


/ 


i , 


I  , 


26 


Case  l:i8-cr-00602-WHP  Document  48-8  Filed  07/18/19  Page  27  of  62 


IN  THE  UNITED  STATES  DISTRICT  COURT 
FOR  THE  SOUTHERN  DISTRICT  OF  NEW  YORK 


IN  THE  MATTER  OF  THE  USE  OF  A  CELL- 
SITE  SIMULATOR  TO  LOCATE  THE  Case 
CELLULAR  DEVICES  ASSIGNED  CALL 


3. 8  MAG  2  9^4 


NUMBERS 


AND 


Filed  Under  Seal 


WARRANT  AND  ORDER  OF  AUTHORIZATION 


TO:  Special  Agents  of  the  Federal  Bnreau  of  Investigation  and  Other  Authorized 

Personnel 

1.  Findings 

The  Court  hereby  finds: 


of  the  Federal  Bureau  of 


1.  Upon  an  affidavit  of  Special  Agent 


Investigation  (“Affidavit”)  and  pursuant  to  Federal  Rule  of  Criminal  Procedure  41,  there  is 
probable  cause  to  believe  that  violations  of  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contilbutions)  (the  “Subject  Offense”)  have  been  committed  by  Michael  Cohen 
(the  “Target  Subject”),  and  that  the  Target  Subject  uses  cellular  devices  assigned  call  numbers 


the  (“Target  Cellular  Devices”),  which  are  described  in 


Attachment  A.  Further,  there  is  probable  cause  to  believe  that  the  location  of  the  Target  Cellular 
Device  will  constitute  evidence  of  the  Subject  Offense.  Specifically,  there  is  probable  cause  to 
believe  that  the  location  of  the  Target  Cellular  Devices  will  constitute  evidence  of  those  criminal 
violations,  including  leading  to  the  location  of  the  Target  Cellular  Devices,  on  which  there  is 
probable  cause  to  believe  evidence  of  these  offenses  exist,  as  detailed  below. 

2.  Pm-suant  to  18  U.S.C.  §  3123(b)(1),  the  Government  has  certified  that  the  pen 


register  information  for  the  Target  Cellular  Devices  is  relevant  to  an  ongoing  investigation  by  the 
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Investigating  Agency  of  the  Target  Subject  and  others  unknown  in  connection  with  suspected 
violations  of  the  Subject  Offense. 

NOW,  THEREFORE,  pursuant  to  Fed.  R.  Grim.  P.  41,  18  U.S.C.  §§  3121  et  seq.,  and  18 
U.S.C.  §  3103a,  IT  IS  HEREBY  ORDERED: 
n.  Warrant  and  Order  of  Authorization 

3.  Warrant.  Law  enforcement  agents  and  other  authorized  law  enforcement 
officials  are  hereby  authorized  to  employ  an  electronic  investigative  teclmique,  which  is  described 

in  Attachment  B,  to  the  determine  the  location  of  the  Target  Cellular  Devices,  which  are  described 
in  Attachment  A. 

4.  Data  Collection  and  Retention.  In  the  course  of  employing  the  technique,  law 
enforcement  agents  and  other  authorized  law  enforcement  officials  (a)  must  make  reasonable 
efforts  to  limit  interference  with  cellular  devices  other  than  the  Target  Cellular  Devices,  (b)  must 
promptly  delete  information  collected  from  cellular  devices  other  than  the  Target  Cellulai’  Devices 
once  the  Target  Cellular  Devices  is  located,  and  (c)  are  prohibited  from  using  data  acquired  beyond 
that  necessary  to  locate  the  Target  Cellular  Devices,  absent  further  order  of  the  Court. 

5.  Delayed  Notice.  Pm’suant  to  18  U.S.C.  §  3103a(b)  and  Federal  Rule  of  Criminal 
Procedure  41(1)(3),  the  Court  authorizes  the  officer  executing  the  wan-ant  to  delay  in  notice  until 
30  days  fi-om  the  end  of  the  period  of  authorized  surveillance.  This  delay  is  justified  because 
there  is  reasonable  cause  to  believe  that  providing  immediate  notification  of  the  warrant  may  have 
an  adverse  result,  as  defined  in  18  U.S.C.  §  2705.  Providing  immediate  notice  to  the  subscriber 
or  user  of  the  Target  Cellular  Devices  would  seriously  jeopardize  the  ongoing  investigation,  as 
such  a  disclosure  would  give  that  person  an  opportunity  to  destroy  evidence,  change  patterns  of 
behavior,  and  notify  confederates.  See  18  U.S.C.  §  3103a(b)(l).  There  is  reasonable  necessity 
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for  the  use  of  the  technique  described  above,  for  the  reasons  set  forth  above.  See  18  U.S.C.  § 
3103a(b)(2). 

6.  Time  of  Execution.  The  Court  authorizes  execution  of  this  Warrant  at  any  time 
of  day  or  night,  owing  to  the  potential  need  to  locate  the  Target  Cellular  Devices  outside  of  daytime 
hours. 

7.  Sealing.  This  Warrant  and  Order,  and  the  supporting  Agent  Affidavit,  shall  be 
sealed  until  hirther  order  of  the  Court,  except  that  the  Government  may  withputfinlherprdeLof 
this  Court:  provide  copies  of  the  Warrant  and  Order  or  the  supporting  Application  and  Agent 
Affidavit  as  need  be  to  personnel  assisting  the  Government  in  the  uivestigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosui’e 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


/J-f-  /f 


('f J' 


Date  Issued 


Time  Issued 


UNITED  STAI'ES  MAGISTR  ATE  JUDGE 
Southern  District  of  New  Ybrk‘ 
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ATTACHMENT  A 

This  warrant  authorizes  the  use  of  the  electronic  investigative  technique  described  in 
Attachment  B  to  identify  the  location  of  the  cellular  devices  assigned  phone  numbers 
^^^^^^^^^^^Hwhose  wireless  provider  is  AT&T,  and  whose  listed  subscriber  is  Michael 


Cohen. 
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ATTACHMENT  B 

Pursuant  to  an  investigation  of  Michael  Cohen  for  a  violation  of  52  U.S.C.  §§ 
30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the  “Subject  Offense”), 
this  Warrant  authorizes  the  officers  to  whom  it  is  directed  to  determine  the  location  of  the  cellular 
devices  identified  in  Attachment  A  by  collecting  and  examining: 

1.  radio  cellular  and  wifi  signals  emitted  by  the  target  cellulai'  device  for  the  pmpose  of 
commnnicating  with  cellular  infrastructure,  including  towers  that  route  and  connect 
individual  communications;  and 

2.  radio  cellular  and  wifi  signals  emitted  by  the  target  cellulai'  device  in  response  to  radio 
cellular  and  wifi  signals  sent  to  the  cellular  device  by  the  officers; 

for  a  period  of  thirty  days,  dm'ing  all  times  of  day  and  night.  This  warrant  does  not  authorize  the 
interception  of  any  telephone  calls,  text  messages,  other  electronic  communications,  and  this 
warrant  prohibits  the  seizure  of  any  tangible  property.  The  Court  finds  reasonable  necessity  for 
the  use  of  the  technique  authorized  above.  See  1 8  U.S.C.  §  3 1 03a(b)(2). 


5 


Case  l:18-cr-00602-WHP  Document  48-8  Filed  07/18/19  Page  32  of  62 


IN  THE  UNITED  STATES  DISTRICT  COURT 
FOR  THE  SOUTHERN  DISTRICT  OF  NEW  YORK 


IN  THE  MATTER  OF  THE  USE  OF  A  CELL- 

SITE  SIMULATOR  TO  LOCATE  THE  Case  No. 

CELLULAR  DEVICES  ASSIGNED  CALL 

NUMBERS  AND  ^■■1  Filed  Under  Seal 


AFFIDAVIT  IN  SUPPORT  OF 
AN  APPLICATION  FOR  A  SEARCH  WARRANT 


being  first  duly  sworn,  hereby  depose  and  state  as  follows; 


INTRODUCTION  AND  AGENT  BACKGROUND 


1 .  I  make  this  affidavit  in  support  of  an  applieation  for  a  search  warrant  under 
Federal  Rule  of  Criminal  Procedure  41  to  authorize  law  enforcement  to  employ  an  electronic 
investigative  technique,  which  is  described  in  Attachment  B,  to  determine  the  location  of  the 
cellular  devices  assigned  call  numbers  ^^^^m||||||||||||||||||||||m(the  “Target  Cellular 
Devices”),  which  are  described  in  Attachment  A. 

2.  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I 
have  been  a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training 
in  these  positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a 
wide  array  of  financial  crimes,  including  offenses  involving  public  corruption.  I  also  have 
training  and  experience  executing  warrants  for  cellphone  location  data. 

3.  The  facts  in  this  affidavit  come  from  my  personal  observations,  my  training  and 
experience,  and  information  obtained  from  other  agents  and  witnesses.  This  affidavit  is  intended 
to  show  merely  that  there  is  sufficient  probable  cause  for  the  requested  warrant  and  does  not  set 
forth  all  of  my  knowledge  about  this  matter. 
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4.  One  purpose  of  applying  for  this  warrant  is  to  determine  with  precision  the  Target 
Cellular  Devices’  location.  However,  there  is  reason  to  believe  the  Target  Cellular  Devices  are 
currently  located  somewhere  within  this  district  because  the  Target  Cellular  Devices’  owner  is 
known  to  spend  most  of  his  time  in  this  district.  Pursuant  to  Rule  41(b)(2),  law  enforcement  may 
locate  the  Target  Cellular  Devices  outside  the  district  provided  the  device  is  within  the  district 

.  when  the  warrant  is  issued. 

5.  Based  on  the  facts  set  forth  in  this  affidavit,  there  is  probable  cause  to  believe  that 
violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offense”)  has  been  committed,  are  being  committed,  and  will  be  committed  by 
Michael  Cohen  and  others.  There  is  also  probable  cause  to  believe  that  the  location  of  the  Target 
Cellular  Devices  will  lead  to  evidence  of  the  Subject  Offense,  as  detailed  below. 

6.  Because  collecting  the  information  authorized  by  this  warrant  may  fall  within  the 
statutory  definitions  of  a  “pen  register”  or  a  “trap  and  trace  device,”  see  18  U.S.C.,  §  3127(3)  & 
(4),  this  warrant  is  designed  to  comply  with  the  Pen  Register  Statute  as  well  as  Rule  41.  See  18 
U.S.C.  §§  3 121-3127.  This  warrant  therefore  includes  all  the  information  required  to  be  included 
in  a  pen  register  order.  See  1 8  U.S.C.  §  3 123(b)(1). 

PROBABLE  CAUSE 

Introduction 

7.  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York 
(“USAO”)  and  the  FBI  are  investigating  a  criminal  violation  of  the  campaign  finance  laws  by 
Michael  Cohen,  a  lawyer  who  holds  himself  out  as  the  personal  attorney  for  President  Donald  J. 
Trump.  As  detailed  below,  there  is  probable  cause  to  believe  that  Cohen  made  an  excessive  in- 

kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald  Trump  in  the 

2  •  ■  ' 
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form  of  a  $130,000  payment  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an 
extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that  alleged  affair 
on  the  eve  of  the  2016  presidential  election. 

8.  The  Target  Cellular  Devices  referenced  in  this  Affidavit  are  the  cellphones 


assigned  call  numbersi 


I  As  further  discussed  below,  the  Target 


Cellular  Devices  are  subscribed  to  in  the  name  of  Michael  Cohen  (the  “Subscriber”).  The 
SubsarihCTiFhliei^To  useAhe  TarptCellphones  and  is  aMarget  S 


AT&T  is  the  Service  Provider  for  the  Target  Cellphones. 

Prior  Relevant  Proeess 

9.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of 
the  Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  ■ 
Chief  United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails 
and  other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 

a.  On  or  about  July  1 8, 20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for  emails 
l^gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received  between 
January  1, 2016.and  July  18, 2017  (the  “First  Cohen  Gmail  Warrant”). 

.  b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 

l^gmah.com  (the 


content  stored  in  the  iCloud  account  associated  with  Apple  ID 
“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

c.  On  or  about  November  1 3 , 20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,2015  and  November  13,2017 
(the  “Second  Cohen  Gmail  Warrant”). 


in  the  account 
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d.  On  or  about  November  13, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  account  “Cohen  MDCPC  Account”)  sent  or  received 

between  the  opening  of  the  Cohen  MDCPC  Account  and  November  13,  2017  (the  “First  Cohen 
MDCPC  Warrant”). 

10.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen 
to  the  US  AO,  which  is  working  with  the  FBFs  New  York  Field  Office. 

11.  On  or  about  February  28,  2018,  the  USAO  and  FBI  sought  and  obtained 
search  warrants  for  emails  in  Cohen  Gmail  Account  and  Cohen  MDCPC  Account,  among  other 
accounts,  sent  or  received  between  November  14,  2017  and  February  28, 2018  (the  “Third' Cohen 
Gmail  Warrmit”  and  “Second  Cohen  MDCPC  Warrant”).^ 

12.  The  above-described  warrants  are  referred  to  herein  as  the  “Cohen  Emails 
Warrants”  and,  with  respect  to  the  iCloud  Warrant,  the  “Cohen  iCloud  Warrant.” 

The  Illegal  Campaign  Contribution  Scheme 

13.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  website 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name  . is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 


^  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 

2  On  or  about  February  28, 2018  and  April  7, 2018,  the.USAO  and  FBI  sought  and  obtained  Rule 
41  search  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 


4 


Case  l:18-cr-00602-WHP  Document  48-8  Filed  07/18/19  Page  36  of  62 


Magazine^  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  11, 2011,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demariding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
1^^^0Tfv“Gohen5-who-^was  then-Bxeeutive-¥i^-President-and  Special- GounseKto-the-TTump 
Organization,  stated  to  E!  News  that  “[t]he  totally  untme  and  ridiculous  story  . . .  emanated  from 
a  sleazy  and  disgusting  website. , . .  The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 
a  lawsuit .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

14.  On  or  about  June  1 6,  20 1 5,  Trump  formally  launched  his  20 1 6  presidential 
campaign.  On  or  about  May  4,  20 1 6,  Trump  became  the  presumptive  Republican  Party  nominee 
for  president,  and  on  July  1 9,  20 1 6,  Tmmp  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Gohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Gohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  1 8,  2016,  Gohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 

15.  On  or  about  October  7, 20 1 6,  The  Washington  Post  published  online  a  video 
and  accompanying  audio  in  which  Trump  referred  to  women  in  what  the  article  described  as 
“vulgar  terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access 
Hollywood.  The  following  day,  on  October  8,  2016,  Tramp  appeared  in  a  video  in  which  he 
stated,  among  other  things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this 


5 


Case  l:18-cr-00602-WHP  Document  48-8  Filed  07/18/19  Page  37  of  62  { 

f 

I 

more  than  a  decade  old  video  are  one  of  them.  Anyone  who  knows  me  knows  these  words  don’t 
reflect  who  I  am.  I  said  it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public 
sources,  I  also  know  that  representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance, 
that  the  Access  Hollywood  comment  was  an  old  and  isolated  incident. 

16.  Based  on  my  review  of  public  sources,  including  an  article  published  in 
Slate  magazine  by  a  reporter  who  interviewed  Clifford,  that  around  this  same  time,  in  or  about 
Qctober-^2016,  Clifford-wasin-discussions  witLABC:sjSQO(iMQrH/ag,.^  show_mdSZafe^ 
magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement  about  her 
alleged  relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author  based  on 
conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to  be  paid  for 
her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized  in  a  2018 
email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  October  2016,  I  was  contacted  by 
counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  2011 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

17.  From  my  review  of  telephone  toll  records^  and  information  produced 
pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days 
following  the  Access  Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and 
emails  with  Keith  Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard 


^  My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pursuant  to  the  iCloud  Warrant. 
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of  American  Media,  Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer,^  Trump,  and  Hope 
Hicks,  who  was  then  press  secretary  for  Trump’s  presidential  campaign.  For  these  text  messages 
and  calls — ^as  well  as  all  of  the  text  messages  and  calls  referenced  in  this  affidavit  involving 
Cohen — Cohen  used  one  of  the  Target  Cellular  Devices  for  the  communication. 

18.  Based  on  the  timing  of  the  calls  in  the  days  following  the  Access  Hollywood 
story,  and  the  content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these 
communieationaeoncemed  the  need  to  prevenf  Clifford  Item  going  public,^  particul^ly;in-the'wake 
of  the  Access  Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes.^ 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 
Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
on  the  telephone  about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October 


^  Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

^  I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  another  law  enforcement  agent  who  has  spoken  to  a  law  enforcement  agent 
who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated,  in  substance,  to  the  best  of  her 
recollection,  she  did  not  learn  about  the  allegations  made  by  Clifford  until  early  November  2016. 
Hicks  was  not  specifically  asked  about  this  three-way  call. 
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8,  2016,  Cohen  and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in 
August,  and  twice  in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  caU 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes .  At  approximately  the  same  time  this  caU  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
beheve  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford. .  At  3 :3 1  a.m.,  now  on  October  9,2016,  Cohen  sent  Howard  a  text  message  in 
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response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that 
said:  “Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you 
wake,  please  call  my  cell.” 

f.  The  following  day,  on  October  1 0, 20 1 6,  at  1 0 : 5  8  a.m.,  Howard  sent  a  text  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regards  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
^opportimtyfMhanks^Pylan.  Qver  to  you~twof’  ""AtM2:25~^p:m;73Davidson  sent~Cohen7srtext 


message  that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to 
be  today.  Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on 
my  participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.® 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
knowthat  on  or  about  October  10, 2016,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 
according  to  the  agreement,  was  to  define  the  “hue  name  and  identity”  of  persons  named  by 


®  As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal.  : 

However,  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving  [ 

the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the  ,  f 

payment  of  money  to  Clifford,  T  believe  that  these  communications  were  related  to  Clifford.  [ 

Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she  f 

negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen  f 

and  Pecker,  Howard,  and  Davidson.  ' 
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pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  side  letter  agreement  in 
order— to-facilitate^the^closing-of  a-  deakbetween-Davidson_s  clienCand„Cohen Jir_  his^client  on. 

October  10,  2016. 

19.  It  appears  that  on  October  1 3 , 20 1 6,  and  the  days  that  followed,  Cohen  took 
steps  to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records, 
information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records 
maintained  by  First  Republic  Bank  (“First  Republic”),  as  well  as  my  participation  in  interviews 
with  employees  of  First  Republic,  I  have  learned  the  following; 

a.  On  the  mommg  of  October  13, 2016,  at  8:54  a.m.,  Cohen  sent  Pecker  atext  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,.!  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 

b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  a  banker  at  First  Repubfic 
Bank  (“First  Republic  Employee-2”).  The  email  attached  documents  fiom  the  Secretary  of  State 
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of  Delaware  indicating  that  Cohen  had  formed  a  limited  liability  company  called  “Resolution 
Consultants  LLC”  on  September  30, 2016.  As.noted  above,  “Resolution  Consultants”  is  the  name 
of  the  entity  that  Cohen  had  told  Howard  he  had  formed  recently  after  Howard  said  Davidson 
would  “do  it.”  At  10:44  a.m.,  Cohen  called  First  Republic  Employee-2  and  told  him,  in  sum  and 
substance,  that  he  needed  an  account  in  the  name  of  “Resolution  Consultants”  opened  immediately, 
and  that  he  did  not  want  an  address  on  the  checks  written  out  of  the  account.  Later  that  day, 
another“employee  aIrFirst  RepublR-emailed  Cohenmccounf  opening  paperworkjto-complete. 


Cohen  returned  the  account  opening  documents  partially  completed,  but  failed  to  provide  a  copy 
of  his  driver’s  license  or  passport,  and  did  not  respond  to  the  employee’s  question  of  how  he 
wanted  to  fund  the  account.  As  a  result,  the  account  was  never  opened. 

c.  On  October  1 7, 20 1 6,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

20.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between 
Cohen  and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client, 
Clifford,  and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the 
presidential  election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained 
pursuant  to  the  iCloud  Warrant,  and  public  soui’ces,  I  know  the  following: 

•  a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’ s  email  account  hosted  by  the  Tmmp  Organization,  on  October  1 7, 20 1 6,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreemenf’  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.'^  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  commumcations  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: _ - . - 

i  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told 

they’re  going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5 :03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

V.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taking  my 

calls.”  Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach?”, 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


Due  to  the  partially  covert  nature  of  the  investigation  to  this,  date,  the  USAO  has  not  requested 
documents  from  the  Trump  Orgamzation  or  Davidson,  and  thus  does  not  possess  the  email 
referenced  in  this  article. 
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investigation,  I  understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  docunients  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 

article-noted  that  Clifford-had-declinecLto  comment.- — ^ - - -  - - - — 

21.  On  or  about  October  25,  2016,  the  communications  between  Cohen, 
Davidson,  Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving 
Clifford.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
Cohen  F.mail  Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned 
the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next 
half  hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about 
eight  minutes.  At  7:1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half 

c.  At  approximately  9:04  a.m.— less  than  thirty  minutes  after  speaking  with  Trump — 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
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Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two 
minutes  later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  a  particular  employee  at  First  Republic  (“First 
Republic  Employee-2”)  and  told  him,  in  sum  and  substance,  that  he  decided  not  to  open  an  account 
in  the  name  of  “Resolution  Consulting”  and  instead  would  be  opening  a  real  estate  consulting 
company  in  the  name  of  “Essential  Consultants.”  Cohen  told  Fh'st  Republic  Employee-2  that  he 
was  at  Trump  Tower,  and  wanted  to  go  to  a  First  Republic  branch  across  the  street  to  open  the 
account,  so  First  Republic  Employee-2  called  another  employee  of  First  Republic  (“First  Republic 
Employee-1  ”),  a  preferred  banker  at  that  branch,  to  assist  Cohen.  At  1 1 :00  a.m.,  First  Republic 
Employee- 1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First  Republic 
Employee- 1,  that  around  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower — on  the 
same  floor  as  the  Trump  Organization— and  went  through  account  opening  questions,  including 

know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  kriow-your-customer 

1 

questions  about  the  purpose  of  the  account — ^the  answers  to  which  First  Republic  Employee-1 
entered  into  a  form— Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Based 
on  my  review  of  records  obtained  from  First  Republic,  it  appears  that  ftiis  account  (the  “Essential 
Consultants  Accounf ’)  was  created  at  a  time  between  1 1 :00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 

minutes.  At  approximately  1:49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an 

attorney  client  trust  account  at  City  National  Bank. 
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f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  ftom  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October 
26,  2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmad  Account  and  then  forwarded  it  to  Davidson. 

^ At  6737  p7m7rCohemasked-Peeker-by7tejft-messages--Gan^\vq;Speak?-Importanfe^ 

Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  Ime  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  con-ect  LLC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receivmg  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  ai-ound  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 
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22.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000 — 
with  the  funds  intended  for  Clifford— for  the  purpose  of  securing  her  ongoing  silence  with  respect 
to  the  allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my 
review  of  toll  records,  hank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and 
Cohen  Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 

the-wire-receive(lfoday,-Octoben27,z20T6_shallJbe  held  by^youArLyom  attorpey  s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  LLC.  I  thank  you  in  advance  for 
your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account^ — 
which  had  been  funded  a  day  prior  from  Cohen’ s  home  equity  line  of  credit — ^to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  LLC). 
Plaintifif’s  signature  will  he  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  10:50  a.m..  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 
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23.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the 
transaction  with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained 
pursuant  to  the  iCloud  Warrant,  public  sources,  and  bank  records,  I  know  the  following: 

a.  On  October  28, 2016,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

— — - ^bi—Later-that-dayy-at-  appro^mately-TiOl— prmT^Davidson  stated^to-Goheii-by-text- 

message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:0  8  p.m.,  “Keith  [Davidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellenf’  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  20 1 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  EEC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  relea:se”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  [Dennison]”  in  exchange  for 
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$130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson’s”  ^ 

attorney,  who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  | 

I 

“EC,  LLC.”  Theagreementstatedtotheaddressfbr  “EC,  LLC,”  which  was  later  referred  to  in  j 

I 

the  agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence.  I 

If 

I 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or  t 

about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at  [ 

City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net  | 

'  ’  .  .  ~  _ _  .  -  -  -  _  I 

I 

settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message  { 

with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package  | 

shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 

I 

address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an  j 

audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 

titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 

recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 

past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 

was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but 

it  appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to 

Kellyanne  Conway,  who  at  the  time  was  Trump’ s  campaign  manager.  They  did  not  connect.  At 

approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 

approximately  six  minutes. 

24.  On  November  4,  2016,  just  three  days  after  the  Clifford  transaction  was 
completed  and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an 
article  alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  If om  ullegations  by. 
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Playboy  model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI 
had  agreed  to  pay  McDougal  to  bury  her  story.  McDougal,  Idee  Clifford,  had  been  represented 
by  Davidson.  Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen . 
Email  Warrants  and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently 
to  Davidson,  Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — -just  days 
before  Election  Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from 


gaining  nationaktractionT— Specifically^  I  have Teamed  theTollowing-r 


a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 

with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent 

Howard  a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump 

Organization  lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for 

comment  from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several 

\ 

times,  rncludmg  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating;  “She’s  being 

really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  uoreachable.”  One 

minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 

responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  carmot  push  her.” 

At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’ s  text:  “Let’s  let  the  dust  settle.  We  don’t 

want  to  push  her  over  the  edge.  She’ s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 

position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 

investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
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discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’ s  pissed.”  Howard  wrote  back, 
“I’m  pissH'  Vnn ’re  pissed  Pecker  is  pi ssed.  Keith  is  pissed.  Not  much  we  can  do.”  Based 
on  my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated 
“he’s  pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal 
could  publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment 
from  AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howai'd,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across. 
The  next  morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far 
I  see  only  6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying!  I  It’s 
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working!”  Cohen,  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if 
necessary,  I  have  a  statement  by  Storm  denying  everything  and  contradicting  the  other  porn  stars 
statement.  I  wouldn’t  use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!” 
Based  on  my  involvement  in  this  investigation,  E  believe  Cohen  was  referring  to  the  above- 
referenced  recorded  audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating 
that  such  a  statement  could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but 
was^unneeess^y  af  that  time— Based  on  a  texTmessage-from  Hicl^  to  Gohen,-Tbelieve-that”later 


that  morning.  Pecker  spoke  to  Tiump. 

25.  On  or  about  November  8,  2016,  Trump  won  the  election  for  President  of 
the  United  States. 

26.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that 
Cohen  arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a 
government  watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging 
that  Cohen  had  violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my 
review  public  sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email 
Warrants,  I  have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  coimsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an' 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
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keep  the  story  from  breaking.  I  knew  the  allegation  to  be  false,  but  /  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn ’t 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  If  s  what  you  do  for  family. 


(Emphasis  added .)  Rased  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  (“...the  2011 
story...”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  2016. 

b.  On  or  about  February  13,  201 8,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  tinie  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 
directly  or  indirectly.” 
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} 

d.  On  or  about  March  9, 20 1 8,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 
from  my,  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.” 

27.  For  the  foregoing  reasons,  there  is  probable  cause  to  believe  that  Cohen 
committed  the  Subject  Offense  by  making  an  in-kind  contribution  to  Trump  or  the  Trump 
campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  election,  Indeed,  while  Cohen 
denies  having  given  an  unlawful  contribution,  in  his  own  statements  Cohen  has  admitted  that  he 
-paid-$'H0,000  oThis-^personaTfunds”  to  Gliffor^and^that  the  paymenCOccurred-less  than  tWa: 
weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations  about  his  behavior 
toward  women,  even  though  allegations  of  an  affair  between  Trump  and  Clifford  existed  since 
2011. 

28.  I  have  reviewed  records  maintained  by  AT&T,  from  which  I  have  learned, 
in  substance  and  in  part,  that  the  Target  Cellular  Devices  are  still  active.  Based  on  my  training 
and  experience,  my  familiarity  with  this  investigation,  and  the  information  set  forth  above,  I 
therefore  beheve  that  the  requested  data  will  lead  to  evidence  of  the  Subject  Offense. 
Specifically,  information  will  lead  to  the  present  location  of  the  Target  Cellular  Devices;  law 
enforcement  may  then  obtain  evidence  from  the  Target  Cellular  Devices,  by  subpoena  or  search 
warrant,  including  but  not  limited  to  contact  lists  containing  contact  information  for  participants 
in  the  illegal  campaign  contribution  scheme  and  well  as  text  messages  between  these  participants. 

MANNER  OF  EXECUTION 

29.  .  In  my  training  and  experience,  I  have  learned  that  cellular  phones  and  other 

cellular  dewces  communicate  wirelessly  across  a  network  of  cellular  infrastracture,  including 

towers  that  route  and  coimect  individual  communications.  When  sending  or  receiving  a 

communication,  a  cellular  device  broadcasts  certain  cellular  and  wifi  signals  to  the  cellular  tower 
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that  is  routing  its  communication.  These  cellular  and  wifi  signals  include  a  cellular  device’s 
unique  identifiers. 

30.  To  facilitate  execution  of  this  warrant  to  determine  the  location  of  the  Target 
Cellular  Devices,  law  enforcement  may  use  an  investigative  device  or  devices  capable  of 
broadcasting  cellular  and  wifi  signals  that  will  be  received  by  the  Target  Cellular  Devices  or 
receiving  cellular  and  wifi  signals  from  nearby  cellular  devices,  including  the  Target  Cellular 
Devices. .  Such  a  device  may  function  in  some  respects  like  a  cellular  tower,  except  that  it  will  not 

be  connected  to  the  cellular  network  and  cannot  be  used  by  a  cell  phone  to  commumcate  with 
others.  The  device  may  send  a  signal  to  the  Target  Cellular  Devices  and  nearby  cellular  devices 
and  thereby  prompt  them  to  send  cellular  and  wifi  signals  that  include  the  unique  identifier  of  the 
device.  Law  enforcement  may  monitor  the  cellular  and  wifi  signals  broadcast  by  the  Target 
Cellular  Devices  for  non-content  signal  information  and  use  that  information  to  determine  the 
Target  Cellular  Devices’  location,  even  if  it  is  located  inside  a  house,  apartment,  or  other  building. 
The  device  will  not  intercept  the  contents  of  the  Target  Cellular  Devices’  communications,  such 
as  telephone  calls,  text  messages,  and  other  electronic  communications.  Further,  the  device  will 
not  collect  any  other  data  stored  on  the  Target  Cellular  Devices,  including  e-mails,  text  messages, 
contact  lists,  images,  or  Global  Positiordng  System  (GPS)  data. 

31.  The  investigative  device  may  interrupt  cellular  service  of  phones  or  other 

cellular  devices  within  its  immediate  vicinity.  Any  service  disruption  to  non-target  devices  will 

be  brief  and  temporary,  and  all  operations  will  attempt  to  limit  the  interference  with  such  devices. 

In  order  to  connect  with  the  Target  Cellular  Devices,  the  device  may  briefly  exchange  cellular  and 

wifi  signals  with  all  phones  or  other  cellular  devices  in  its  vicinity  to  determine  whether  those 

devices’  unique  identifiers  match  the  identifiers  of  the  Target  Cellular  Devices.  These  cellular 
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and  wifi  signals  may  include  cell  phone  identifiers.  The  device  will  not  complete  a  connection 
with  cellular  devices  determined  not  to  be  the  Target  Cellular  Devices,  and  law  enforcement  will 
limit  collection  of  information  from  devices  other  than  the  Target  Cellular  Devices.  To  the  extent 
that  any  information  from  a  cellular  device  other  than  the  Target  Cellular  Devices  is  collected  by 
the  law  enforcement  device,  law  enforcement  will  delete  that  information,  and  law  enforcement 
will  make  no  investigative  use  of  it  absent  further  order  of  the  court,  other  than  distinguishing  the 

TargefCellular-Deyiees-from  alTother  eellukr-devieesi - . ’ . . — 

AUTHORIZATION  REQUEST 

32.  Based  on  the  foregoing,  I  request  that  the  Court  issue  the  proposed  search 
warrant,  pursuant  to  Federal  Rule  of  Criminal  Procedure  41.  The  proposed  warrant  also  will 
function  as  apen  register  order  under  18  U.S.C.  §  3123. 

33.  I  further  request,  pursuant  to  18  U.S.C.  §  3103a(b)  and  Federal  Rule  of 
Criminal  Procedure  41(f)(3),  that  the  Court  authorize  the  officer  executing  the  warrant  to  delay 
notice  until  30  days  from  the  end  of  the  period  of  authorized  surveillance.  This  delay  is  justified 
because  there  is  reasonable  cause  to  believe  that  providing  immediate  notification  of  the  warrant 
may  have  an  adverse  result,  as  defined  in  18  U.S.C.  §  2705.  Providing  immediate  notice  to  the 
subscriber  or  user  of  the  Target  Cellular  Devices  would  seriously  jeopardize  the  ongoing 
investigation,  as  such  a  disclosure  would  give  that  person  an  opportunity  to  destroy  evidence, 
change  patterns  of  behavior,  and  notify  confederates.  See  18  U.S.C.  §  3103a(b)(l).  There  is 
reasonable  necessity  for  the  use  of  the  technique  described  above,  for  the  reasons  set  forth  above. 

18  U.S.C.  §3103a(b)(2). 
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34.  I  further  request  that  the  Court  authorize  execution  of  the  warrant  at  any 
time  of  day  or  night,  owing  to  the  potential  need  to  locate  the  Target  Cellular  Devices  outside  of 
daytime  hours. 

35.  I  further  request  that  the  Court  order  that  all  papers  in  support  of  this 
application,  including  the  affidavit  and  search  warrant,  be  sealed  until  further  order  of  the  Court. 
These  documents  discuss  an  ongoing  criminal  investigation  that  is  neither  public  nor  known  to  all 
of  the  targets  of  the  investigation.  Accordingly,  there  is  good  cause  to  seal  these  documents 


because  their  premature  disclosure  may  seriously  jeopardize  that  investigation. 

36.  A  search  warrant  may  not  be  legally  necessary  to  compel  the  investigative 
technique  described  herein.  Nevertheless,  I  hereby  submit  this  warrant  application  out  of  an 
abundance  of  caution. 

Respectfully  submitted. 


f  ederal  Bureau  of  investigation 


Subscribed  and  sworn  to  before  me 


On: 


UNITED  STATES  MAGISTRATE  JUDGE 
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IN  THE  UNITED  STATES  DISTMCT  COURT 
FOR  THE  SOUTHERN  DISTRICT  OF  NEW  YORK 

Case  No. _ 

Filed  Under  Seal 

WARRANT  AND  ORDER  OF  AUTHORIZATION 

TO:  Special  Agents  of  the  Federal  Bureau  of  Investigation  and  Other  Authorized 

■PersonEreU"'^  ‘  '''' 

L  Findings 

The  Court  hereby  finds: 

1.  Upon  an  affidavit  of  Special  Agent  the  Federal  Bureau  of 

Investigation  (“Affidavit”)  and  pursuant  to  Federal  Rule  of  Criminal  Procedure  41,  there  is 
probable  cause  to  believe  that  violations  of  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Subject  Offense”)  have  been  committed  by  Michael  Cohen 
(the  “Target  Subject”),  and  that  the  Target  Subject  uses  cellular  devices  assigned  call  numbers 

(“Target  Cellular  Devices”),  which  are  described  in 
Attachment  A.  Further,  there  is  probable  cause  to  believe  that  the  location  of  the  Target  Cellular 
Device  will  constitute  evidence  of  the  Subject  Offense.  Specifically,  there  is  probable  cause  to 
believe  that  the  location  of  the  Target  Cellular  Devices  will  constitute  evidence  of  those  criminal 
violations,  including  leading  to  the  location  of  the  Target  Cellular  Devices,  on  which  there  is 
probable  cause  to  beheve  evidence  of  these  offenses  exist,  as  detailed  below. 

2.  Pursuant  to  18  U.S.C.  §  3123(b)(1),  the  Government  has  certified  that  the  pen 
register  information  for  the  Tai'get  Cellular  Devices  is  relevant  to  an  ongoing  investigation  by  the 


IN  THE  MATTER  OF  THE  USE  OF  A  CELL- 
SITE  SIMULATOR  TO  LOCATE  THE 
CELLULAR  DEVICES  ASSIGNED  CALL 
NUMBERS 
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Investigating  Agency  of  the  Target  Subject  and  others  unknown  in  connection  with  suspected 
violations  of  the  Subject  Offense. 

NOW,  THEREFORE,  pursuant  to  Fed.  R.  Crim.  P.  41,  18  U.S.C.  §§  3121  etseq.,  and  18 
U.S.C.  §■  3103a,  rr  IS  HEREBY  ORDERED: 
n.  Warrant  and  Order  of  Authorization 

3.  Warrant.  Law  enforcement  agents  and  other  authorized  law  enforcement 

offieials-are^hereby  authorized4o-employ-an-electroniainvestigative  technique,  which  is  described, 

in  Attachment  B,  to  the  determine  the  location  of  the  Target  Cellular  Devices,  which  are  described 
in  Attachment  A. 

4.  Data  Collection  and  Retention.  In  the  course  of  employing  the  technique,  law 
enforcement  agents  and  other  authorized  law  enforcement  officials  (a)  must  make  reasonable 
efforts  to  limit  interference  with  cellular  devices  other  than  the  Target  Cellular  Devices,  (b)  must 
promptly  delete  information  collected  from  cellular  devices  other  than  the  Target  Cellular  Devices 
once  the  Target  Cellular  Devices  is  located,  and  (c)  are  prohibited  from  using  data  acquired  beyond 
that  necessary  to  locate  the  Target  Cellular  Devices,  absent  further  order  of  the  Court. 

5.  Delayed  Notice.  Pursuant  to  1 8  U.S.C.  §  3 1 03a(b)  and  Federal  Rule  of  Cruninal 
Procedure  41(f)(3),  the  Court  authorizes  the  officer  executing  the  warrant  to  delay  in  notice  until 
30  days  from  the  end  ofrthe  period  ofrauthorized  surveillance.  This  delay  is  justifiecLbecause 
there  is  reasonable  cause  to  believe  that  providing  unmediate  notification  of  the  warrant  may  have 
an  adverse  result,  as  defined  in  18  U.S.C.  §  2705.  Providing  immediate  notice  to  the  subscriber 
or  user  of  the  Target  Cellular  Devices  would  seriously  jeopai'dize  the  ongoing  investigation,  as 
such  a  disclosure  would  give  that  person  an  oppoitunity  to  destroy  evidence,  change  patterns  of 
behavior,  and  notify  confederates.  See  18  U.S.C.  §  3103a(b)(l).  There  is  reasonable  necessity 
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for  the  use  of  the  technique  described  above,  for  the  reasons  set  forth  above.  See  18  U.S.C.  § 


3103a(b)(2). 

6.  Time  of  Execution.  The  Court  authorizes  execution  of  this  Warrant  at  any  time 
of  day  or  night,  owing  to  the  potential  need  to  locate  the  Target  Cellular  Devices  outside  of  da5rtime 
hours. 

7.  Sealing.  This  Warrant  and  Order,  and  the  supporting  Agent  Affidavit,  shall  be 
-sealed-until-further-order  ofithe^CourC  except  that  the  Government  may-withoutTurther~order~oT 
this  Court:  provide  copies  of  the  Warrant  and  Order  or  the  supporting  Application  and  Agent 
Affidavit  as  need  he  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


Time  Issued 


UNITED  STATES  MAGISTRATE  JUDGE 
S  outhem  District  of  New  Y ork 


s/  (g|7T^A<sJ 
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ATTACHMENT  A 


This  warrant  authorizes  the  use  of  the  electronic  investigative  technique  described  in 
Attachment  B  to  identify  the  location  of  the  cellular  devices  assigned  phone  numbers 

wireless  provider  is  AT&T,  and  whose  hsted  subscriber  is  Michael 


Cohen. 
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ATTACHMENT  B 

Pursxiant  to  an  investigation  of  Michael  Cohen  for  a  violation  of  52  U.S.C.  §§ 
30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the  “Subject  Offense”), 
this  Warrant  authorizes  the  officers  to  whom  it  is  directed  to  determine  the  location  of  the  cellular 
devices  identified  in  Attachment  A  by  collecting  and  examining: 

1.  radio  cellular  and  wifi  signals  emitted  by  the  target  cellular  device  for  the  purpose  of 
y  •  yjrommiTnrcating^wjthmeelhilar  infrastructuTeTyincluding  towers^that  route"~and"c~ow 

individual  communications;  and 

2.  radio  cellular  and  wifi  signals  emitted  by  the  target  cellular  device  in  response  to  radio 
cellular  and  wifi  signals  sent  to  the  cellular  device  by  the  officers; 

for  a  period  of  thirty  days,  during  all  times  of  day  and  night.  This  warrant  does  not  authorize  the 
interception  of  any  telephone  calls,  text  messages,  other  electronic  communications,  and  this 
warrant  prohibits  the  seizure  of  any  tangible  property.  The  Court  finds  reasonable  necessity  for 
the  use  of  the  technique  authorized  above.  See  18  U.S.C.  §  3103a(b)(2). 
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U.S.  Department  of  Justice 

United  States  Attorney 
Southern  District  of  New  York 


The  Silvio  J.  Mollo  Building 
One  Saint  Andrew ’s  Plaza 
New  York,  New  York  10007 


July  15,  2019 


EX  PARTE  and  UNDER  SEAL 

BY  EMAIL  and  HAND 

The  Honorable  William  H.  Pauley  III 
United  States  District  Judge 
Southern  District  of  New  York 
500  Pearl  Street 
New  York,  NY  10007 

Re:  United  States  v.  Michael  Cohen,  18  Cr.  602  (WHP) 

Dear  Judge  Pauley: 

Pursuant  to  the  Court’s  February  7,  2019  opinion  and  order  (the  “Order”)  and  May  21, 
2019  order,  the  Government  respectfully  submits  this  sealed,  ex  parte  status  report  explaining  the 
need  for  continued  redaction  of  the  materials  subject  to  the  Order.  {See  Order  at  30). 

By  way  of  background,  several  media  organizations  filed  a  request  to  unseal  the  affidavits, 
warrants,  and  riders  associated  with  several  different  searches  that  were  conducted  in  connection 
with  a  grand  jury  investigation  into  Michael  Cohen  and  others  (the  “Materials”).  The  Government 
opposed  that  request,  citing  the  need  to  protect  an  ongoing  investigation  and  the  personal  privacy 
of  certain  individuals  named  in  the  Materials.  On  February  7,  2019,  this  Court  granted  the  motion 
in  part  and  denied  it  in  part.  Although  the  Court  directed  that  certain  parts  of  the  Materials  be 
unsealed  (with  limited  redactions  to  protect  privacy  interests),  the  Court  denied  the  motion  to 
unseal  all  of  the  Materials.  Relevant  here,  the  Court  held  that  “the  portions  of  the  Materials  relating 
to  Cohen’s  campaign  finance  crimes  shall  be  redacted”  to  protect  the  ongoing  law  enforcement 
investigation.  (Order  at  11).  On  May  21,  2019,  after  receiving  a  status  update  from  the 
Government  on  the  need  for  continued  sealing,  the  Court  issued  an  order  permitting  continued 
sealing  of  the  campaign  finance  portions  of  the  Materials  to  protect  an  ongoing  investigation,  and 
directed  that  the  Government  provide  another  update  by  this  date. 

The  Government  is  no  longer  seeking  to  maintain  the  campaign  finance  portions  of  the 
Materials  under  seal  in  order  to  protect  an  ongoing  investigation.^  However,  while  the  majority  of 


^  The  Government  has  effectively  concluded  its  investigations  of  (1)  who,  besides  Michael  Cohen, 
was  involved  in  and  may  be  criminally  liable  for  the  two  campaign  finance  violations  to  which 
Cohei^le^uiltyJ^^^^^^^^^^^^^^^^I;  and  (2)  whether  certain  individuals,  H|||^m|| 
made  false  statements^gavef^se  testimony  or  otherwise  obstructed  justice  in 
connection  with  this  investigation 
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the  campaign  finance  portions  of  the  Materials  can  now  be  unsealed,  the  Government  respectfully 
submits  that  some  redactions  should  be  maintained  in  order  to  protect  the  personal  privacy  of 
certain  individuals.  In  particular,  consistent  with  the  Court’s  prior  Order,  the  Government  seeks 
to  redact  references  to  individuals  who  are  either  (1)  ‘“peripheral  characters’  for  whom  the 
Materials  raise  little  discemable  inference  of  criminal  conduct”  but  who  “may  nonetheless  be 
‘stigmatized’”  by  their  inclusion  in  the  Materials;  or  (2)  people  “around  Cohen  from  which  the 
public  might  infer  criminal  complicity.”  (Order  at  14).  However,  while  most  references  to  such 
individuals  are  redacted,  the  Government  does  not  seek  to  redact  references  to  those  individuals 
that  are  either  (a)  facts  that  have  been  publicly  confirmed,  either  by  the  individual  in  public 
statements  or  the  Government  in  public  filings;  or  (b)  facts  sourced  from  publicly  available 
materials.  (See  Order  at  15  (“Shielding  third  parties  from  unwanted  attention  arising  from  an  issue 
that  is  already  public  knowledge  is  not  a  sufficiently  compelling  reason  to  justify  withholding 
judicial  documents  from  public  scrutiny.”)). 

Together  with  this  letter,  the  Government  has  transmitted  a  copy  of  one  of  the  search 
warrant  affidavits  with  the  proposed  redactions  marked.  See  Ex.  A,  at  38-57,  66-67,  71,  73-74, 
83-101 .  (The  proposed  redactions  also  include  the  privacy-based  redactions  previously  authorized 
in  the  bank  and  tax  portions  of  the  Materials.)  The  Government  respectfully  requests  that  the  Court 
approve  these  redactions,  and  will  submit  corresponding  redactions  to  the  other  affidavits  (which 
are  substantially  similar  to  the  attached  affidavit)  once  the  Court  has  ruled  on  these  proposed 
redactions. 


Respectfully  submitted, 

AUDREY  STRAUSS 
Attorney  for  the  United  States, 

Acting  Under  Authority  Conferred  by 
28  U.S.C.  §515 


Thomas  McI4^^7iNicolas  Roos 
Assistant  United  States  Attorneys 
(212)  637-2200 


cc:  Counsel  of  Record  (by  ECF) 


